Sawyer, B.D., Hancock, P.A. (2018). Hacking the Human: The Prevalence Paradox in Cybersecurity. Human Factors, 60(5), 597-609. PDF