Balancing Usability and Security in Secure System Design: A Comprehensive Study on Principles, Implementation, and Impact on Usability

Taofeek Olayinka Agboola; Job Adegede; John G. Jacob

Taofeek Olayinka Agboola Department of Computer Science, Stephen F. Austin State University, United States of America http://orcid.org/0009-0009-2882-7230
Job Adegede Department of Computer Science, Stephen F. Austin State University, United States of America
John G. Jacob Department of Informatics, Fort Hays State University, United States of America

Abstract

Purpose - The purpose of this study is to provide a comprehensive analysis of the principles and implementation strategies of secure system design, emphasizing the critical balance between security and usability. This study aims to uncover how usability impacts the effectiveness of secure systems, exploring the human-centric approach to security. This research offers insights for organizations to develop systems that ensure robust security while providing a seamless, intuitive user experience.

Method - This study employs an extensive review of existing literature on secure system design principles, usability studies, and human-centric security approaches.

Result - Identification of fundamental principles that underpin secure system design, like confidentiality, integrity, availability, authentication, and authorization. Highlights common usability challenge; including complex authentication processes, poor interface design, and lack of user-friendly features. Examining the necessary trade-offs and providing strategies to achieve a balance between robust security measures and user convenience.

Conclusion – The study concludes that secure system design must adopt a human-centric approach, emphasizing usability's role in effective security. Technical measures are vital, but user behavior significantly impacts overall security. Addressing usability challenges enhances compliance and reduces risks. Integrating security and usability principles is essential for developing secure, user-friendly systems

Recommendation – Future research should focus on user-centered design for secure systems, incorporating continuous usability testing to promptly address issues. Provide comprehensive user education to enhance security awareness. Encourage collaboration between designers and security experts to create solutions that balance security and usability effectively.

Research Implication - The research highlights the critical link between usability and security in system design, underscoring the need for a human-centric approach. It provides guidelines for creating secure, user-friendly systems to boost compliance and reduce risks, while also informing policy and encouraging further exploration of balancing security and usability in technology.

Author Biographies

Taofeek Olayinka Agboola, Department of Computer Science, Stephen F. Austin State University, United States of America

Taofeek Agboola is an early career cybersecurity professional with a robust background in endpoint analysis, network security, and vulnerability assessments. He is adept at monitoring networks for security risks, implementing secure cloud configurations, and performing thorough incident responses. He holds a Master of Science in Cybersecurity from Stephen F. Austin State University and a Bachelor of Science in Computer Science from Adekunle Ajasin University. Taofeek is also certified in CompTIA Security+, (ISC)² Certified in Cybersecurity, and Cisco's Networking Essentials, among others. His professional affiliations include the International Information System Security Certification Consortium (ISC)² and the Association for Computing Machinery.

Job Adegede, Department of Computer Science, Stephen F. Austin State University, United States of America

Job Adegede is a data network Infrastructure Architect with an MSc in Cybersecurity from Stephen F. Austin State University, TX, and an MSc in Global Management from the University of Salford, UK. He's an avid technology specialist and business process analyst with a domain specialization in data network security and performance management.

John G. Jacob, Department of Informatics, Fort Hays State University, United States of America

John G. Jacob is an accomplished Security & Compliance Analyst with over six years of professional experience in the field of cybersecurity. He holds a Master's degree in Cybersecurity from Fort Hays State University and a Bachelor's degree in Computer Science from Adekunle Ajasin University. John is certified in several key areas, including CompTIA Security+, A+, AZ500, and CySA+, showcasing his broad expertise and commitment to continuous learning.