Age-appropriate password “best practice” ontologies for early educators and parents

Abstract

This is a PDF file of an article that has undergone enhancements after acceptance, such as the addition of a cover page and metadata, and formatting for readability, but it is not yet the definitive version of record. This version will undergo additional copyediting, typesetting and review before it is published in its final form, but we are providing this version to give early visibility of the article. Please note that, during the production process, errors may be discovered which could affect the content, and all legal disclaimers that apply to the journal pertain.

Children’s Password-Related Books: Efficacious, Vexatious and Incongruous

“…It might seem that online sources are in a better position to provide up-to-date education, but we found that online sources, too, were delivering incorrect advice because they, too, were not kept up to date (Prior and Renaud 2020).…”

“…To answer RQ1, we needed a baseline to compare grounded "best practice" principles to those presented in the books. To this end, we derived an ontology of password "best practice" from advice published by standards bodies such as NIST and the NCSC in the UK (Prior and Renaud 2020). This gave us a benchmark to support analysis of the advice presented in the children's books.…”

“…As a first step towards formulating an educational approach, we developed three age-appropriate password "best practice" ontologies: for 4-5, 6-7 and 8-9 year olds (Prior and Renaud 2020). As a next step, we will work on lesson plans that teachers and parents could use to convey these principles to their charges.…”

Strengthening Children’s Privacy Literacy through Contextual Integrity

“…Indeed, any attempt to strengthen children's privacy literacy must accommodate variations in children's developmental capacities, caregivers' child-rearing approaches, educators' pedagogical styles, policies of institutions like schools, affordances of digital platforms, and privacy regulations pertaining to children's data. While recent work has begun to develop privacy-related guidance for children of different ages (Prior & Renaud, 2020), we believe CI offers a means to address several of these variations because of its commitment to norms over rules and its attendance to privacy as the appropriate flow of information.…”

Dyslexia and Password Usage: Accessibility in Authentication Design

“…The ability to create, retain and enter passwords requires a number of cognitive skills. These include literacy, the ability to focus, creativity, problem-solving, decision making, attentional abilities, and the ability to keep secrets [34]. When someone enters a password, they subsequently have to be able to remember it, including the exact spelling, or order, of the password symbols.…”