Any good papers/articles on the application of behavioral economics concepts to the decisions InfoSec professionals make? This question is purely in the realm of design choices, risk analysis, etc. (not on end-user behavior, investment decisions by executives, etc.). Please RT!
that's pretty broad, my friend. i guess i might try to narrow the scope a bit: check out the WEIS papers (economics in infosec). also i'd go look at some choice architecture / privacy user experience design (for example the papers shared at SOUPS).
