从高等教育机构内转出2FA中吸取的经验教训
Lessons Learnt from a 2FA roll out within a higher education organisation
摘要：
在组织中推出新的安全机制需要规划，良好的沟通，用户的采用，对所经历的挑战以及如何克服这些挑战的反复反思。我们的案例研究引发了用户的看法，以反映在我们的高等教育机构内推出的双因素认证（2FA）机制的采用和使用。这是使用混合方法研究方法实现的。我们使用内容和主题编码进行的定性分析显示，最初短信是最受欢迎的“第二因素”，而2FA的主要可用性问题是如何让Android应用程序工作;这一结果出乎IT团队的意料，并导致该技术随后推出的方式发生变化，使Android应用程序成为默认的主要第二因素。在用户所需信息方面吸取了一些经验教训;这包括如何在不同的情况下使用技术，以及更广泛地了解技术为什么对用户和组织有益。该案例研究还强调了对组织安全状况的积极影响，这是使用IT服务请求指标来衡量的。
英文摘要：
Rolling out a new security mechanism in an organisation requires planning, good communication, adoption from users, iterations of reflection on the challenges experienced and how they were overcome. Our case study elicited users' perceptions to reflect on the adoption and usage of the two factor authentication (2FA) mechanism being rolled out within our higher education organisation. This was achieved using a mixed method research approach. Our qualitative analysis, using content and thematic coding, revealed that initially SMS was the most popular 'second factor' and the main usability issue with 2FA was the getting the authenticator app to work; this result was unexpected by the IT team and led to a change in how the technology was subsequently rolled out to make the authenticator app the default primary second factor. Several lessons were learnt about the information users needed; this included how to use the technology in different scenarios and also a wider appreciation of why the technology was beneficial to a user and the organisation. The case study also highlighted a positive impact on the security posture of the organisation which was measure using IT service request metrics.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
