The Psychology of Security
AFRICACRYPT 2008, LNCS 5023, Springer-Verlag, 2008, pp. 50-79.
EXCERPT: Security is both a feeling and a reality. And they're not the same.
The reality of security is mathematical,based on the probability of different risks and the effectiveness of different countermeasures. We can calculate how secure your home is from burglary, based on such factors as the crime rate in the neighborhood you live in and your door-locking habits. We can calculate how likely it is for you to be murdered, either on the streets by a stranger or in your home by a family member. Or how likely you are to be the victim of identity theft. Given a large enough set of statistics on criminal acts, it's not even hard; insurance companies do it all the time.
Schneier.com is a personal website. Opinions expressed are not necessarily those of Co3 Systems, Inc.