1. Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY

2. Cognitive

3. Security failures are cognitive failures

4. Two systems one brain Automatic Intuitive Instinctive Primary Rapid Blind Considered Effortful Focused Secondary Slower Lazy

5. Cognitive Bias

6. Anchoring

7. Loss Aversion

8. Principle of Authority

9. Mitigating cognitive failures

10. Threat Modelling

11. Check Lists

12. Security First

13. Further information  BBC Horizon – How we really make decisions  Wikipedia – List of Cognitive Biases  Cognitive Dissonance – the book  Cognitive Dissonance – the podcast

14. Thank you  Twitter : @neildixley  www.neildixley.com www.neildixley.com  Perfect Image