安全性、可用性和多个信息源：探索系统管理员的更新行为
Security, Availability, and Multiple Information Sources: Exploring Update Behavior of System Administrators
摘要：
专家们一致认为，保持系统最新是一项强大的安全措施。以前的工作发现，用户有时明确地避免执行及时更新，例如，这是由于对最终用户安全性具有负面影响的不良体验。对另一个重要的用户组的研究较少：系统管理员，他们负责保持复杂和异构的系统环境可用和安全。在本文中，我们试图了解管理员的行为，经验和态度，在企业环境中的更新。根据访谈研究的结果，我们开发了一个在线调查，并量化了常见做法和障碍（例如，停机时间或缺乏有关更新的信息）。调查结果表明，即使是经验丰富的管理员也会在更新过程中遇到困难，因为更新的后果有时很难评估。因此，我们认为，更可用的监控和更新流程对于保证大规模IT安全至关重要。
英文摘要：
Experts agree that keeping systems up to date is a powerful security measure. Previous work found that users sometimes explicitly refrain from performing timely updates, e.g., due to bad experiences which has a negative impact on end-user security. Another important user group has been investigated less extensively: system administrators, who are responsible for keeping complex and heterogeneous system landscapes available and secure. In this paper, we sought to understand administrators' behavior, experiences, and attitudes regarding updates in a corporate environment. Based on the results of an interview study, we developed an online survey and quantified common practices and obstacles (e.g., downtime or lack of information about updates). The findings indicate that even experienced administrators struggle with update processes as the consequences of an update are sometimes hard to assess. Therefore, we argue that more usable monitoring and update processes are essential to guarantee IT security at scale.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
