Paper Type
Complete
Abstract
Security behavior research has increasingly recognized that human behavior is central to understanding why security mechanisms succeed or fail, yet most empirical studies still rely on self report or high level behavioral metrics. The growing availability of sensing technologies enables real time assessment of human cognition and its impact on their security decisions. This study examines how workload configurations influence stress, attention, and secure behavior by integrating facial micro expression analysis, webcam based gaze tracking, and behavioral logging within a simulated in basket workflow. Using a within subjects design (N = 113), we manipulated cognitive load and task volume to model conditions under which users are most vulnerable. Results show nonlinear stress responses and distinct patterns of errors consistent with cognitive load theory and human error frameworks. Although workload influenced attention, participants who exhibited higher stress directed less visual attention towards security alerts. Our analyses show that correct security decision-making is primarily driven by cognitive constraints rather than emotional arousal alone.
Paper Number
1838
Recommended Citation
Vaishnav, Lakshika and Goel, Sanjay, "Does attention matter? The role of cognitive load in human security behavior" (2026). AMCIS 2026 Proceedings. 38.
https://aisel.aisnet.org/amcis2026/sig_sec/sig_sec/38
Does attention matter? The role of cognitive load in human security behavior
Security behavior research has increasingly recognized that human behavior is central to understanding why security mechanisms succeed or fail, yet most empirical studies still rely on self report or high level behavioral metrics. The growing availability of sensing technologies enables real time assessment of human cognition and its impact on their security decisions. This study examines how workload configurations influence stress, attention, and secure behavior by integrating facial micro expression analysis, webcam based gaze tracking, and behavioral logging within a simulated in basket workflow. Using a within subjects design (N = 113), we manipulated cognitive load and task volume to model conditions under which users are most vulnerable. Results show nonlinear stress responses and distinct patterns of errors consistent with cognitive load theory and human error frameworks. Although workload influenced attention, participants who exhibited higher stress directed less visual attention towards security alerts. Our analyses show that correct security decision-making is primarily driven by cognitive constraints rather than emotional arousal alone.
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.
Comments
SIG SEC