CWE-655
Insufficient Psychological Acceptability
The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.
Mitigation
Phase: Testing
Description:
- Where possible, perform human factors and usability studies to identify where your product's security mechanisms are difficult to use, and why.
Mitigation
Phase: Architecture and Design
Description:
- Make the security mechanism as seamless as possible, while also providing the user with sufficient details when a security decision produces unexpected results.
No CAPEC attack patterns related to this CWE.