research collection on security, usability, and psychology

My meme is that IT and INFOSEC forget what they learn then reinvent the wheel repeatedly. Best to start with what we know, identify best spots for further work, and go from there. Here's some links to major work in that area to help you with your research and designing. -Nick P, security engineer/researcher (high assurance)

Security and Human Behavior Conferences:

https://www.schneier.com/blog/archives/2014/06/security_and_hu_3.html

Bruce has links to the old ones. He also links to Ross Anderson's liveblogging where he summarizes and comments on the presentations. It's all very holistic.

Proceedings on the 1st conference on usability, psychology, and security

http://dl.acm.org/citation.cfm?id=1387649&picked=prox

Note: that the first conference happened in 2008 supports your position of how far behind we are on this concept.

USENIX Usability Psychology and Security 2008

https://www.usenix.org/legacy/event/upsec08/tech/