Computer security and, versus, or security informatics: keynote address
L. Jean Camp · Journal of computing sciences in colleges · 2011
Economic and technical trends have created the need for specialists in computer security. Rather than requiring the creation of ever more narrow programs of study, security informatics offers a different path. Unlike traditional computer security programs in computer science departments, this program focuses on a holistic view of security by looking at technical, user, and organizational aspects. Computer science programs have traditionally focused only on the technical aspects of security, which is at least partially responsible for the failure to address successfully some of the more social types of online attacks, such as phishing (a form of Internet scam that allows thieves access to the victim's accounts). For example, security mechanisms which can be used to preemptively find and stop phishing attacks exist in most browsers, but because these technologies are difficult to engage, few people are aware of their existence. Even fewer are able to effectively use these technologies. Similarly many technical security measures now fail in large part due to the lack of consideration given to the human, organizational, and economic dimensions in security design. Security Informatics provides a more encompassing perspective on security. Security Informatics can be combined with other areas, as shown by Indiana's use of concentrations in the local Security Informatics program, to leverage institutional strength in psychology, economics, health care, or regional studies. Also, by focusing on areas where women and men of color are not as under-represented as in computer science, security informatics can create an opportunity for recruitment in populations that might not consider a more traditional degree.