Security and Usability: Analysis and Evaluation

Kainda, Ronald; Fléchais, Ivan; Roscoe, A. W.

doi:10.1109/ares.2010.77

Cited by 89 publications

(73 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This effort has resulted in the Security Usability and Human-Computer Interaction and Security (HCISec/HCI-S) domains, and led to their establishment as crucial areas for research and application. Work within these fields typically studies the usability of mechanisms for authentication, encryption, PKI and device pairing, and generally security tools and secure systems [9].…”

Section: Introductionmentioning

confidence: 99%

Trustworthy and effective communication of cybersecurity risks: A review

Nurse

Creese

Goldsmith

et al. 2011

2011 1st Workshop on Socio-Technical Aspects in Security and Trust (STAST)

View full text Add to dashboard Cite

Abstract-Slowly but surely, academia and industry are fully accepting the importance of the human element as it pertains to achieving security and trust. Undoubtedly, one of the main motivations for this is the increase in attacks (e.g., social engineering and phishing) which exploit humans and exemplify why many authors regard them as the weakest link in the security chain. As research in the socio-technical security and trust fields gains momentum, it is crucial to intermittently pause and reflect on their progress while also considering related domains to determine whether there are any established principles which may be transferred. Comparison of the states-of-the-arts may assist in planning work going forward and identifying useful future directions for the less mature socio-technical field. This paper seeks to fulfil several of these goals, particularly as they relate to the emerging cybersecurity-risk communication domain. The literature reviews which we conduct here are beneficial and indeed noteworthy as they pull together a number of the key aspects which may affect the trustworthiness and effectiveness of communications on cybersecurity risks. In particular, we draw on information-trustworthiness research and the established field of risk communication. An appreciation of these aspects and precepts is imperative if systems are to be designed that play to individuals' strengths and assist them in maintaining security and protecting their applications and information.

show abstract

Section: Introductionmentioning

confidence: 99%

Trustworthy and effective communication of cybersecurity risks: A review

Nurse

Creese

Goldsmith

et al. 2011

2011 1st Workshop on Socio-Technical Aspects in Security and Trust (STAST)

View full text Add to dashboard Cite

show abstract

“…The first attempt to resolve the pairing issues was resurrecting duckling by [31]. It was based on standard cables and physical interfaces but its usability was limited up till 1990's, today it is totally obsolete because of devices' variation and diversity.…”

Section: ) Others A) Resurrecting Ducklingmentioning

confidence: 99%

“…IR works as the OOB channel in pairing process. The user only initiates the setup then it works itself but IR is replaced now with other more efficient and easy to use technologies like Bluetooth [31], [38], [42]. …”

Section: ) Others A) Resurrecting Ducklingmentioning

confidence: 99%

Secure Device Pairing Methods: An Overview

Noureen¹,

Shoaib²,

Sarfraz³

2017

ijacsa

View full text Add to dashboard Cite

Abstract-The procedure of setting up a secure communication channel among unfamiliar human-operated devices is called "Secure Device Pairing". Secure binding of electronic devices is a challenging task because there are no security measures and commonly trusted infrastructure. It opens up the doors for many security threats and attacks e.g. man in middle and evil twin attacks. In order to mitigate these attacks different techniques have been proposed; some level of user participation is required in decreasing attacks in the device pairing process. A comparative and comprehensive evaluation of prominent secure device pairing methods is described here. The main motive of this research is to summarize the cryptographic protocols used in pairing process and compare the existing methods to secure the pairing devices. That will help in selecting best method according to the situation, as the most popular or easy method, instead they choose different methods in different circumstances.

show abstract

“…A security-usability threat model has been presented in [44] that focuses on HCI Security (HCISec). HCISec is centered around the user, who demands security as well as usability.…”

Section: Framework/modelsmentioning

confidence: 99%

A Review of Gaps between Usability and Security/Privacy

Alshamari¹

2016

IJCNS

View full text Add to dashboard Cite

Different domains of computing systems require higher level of focus towards specific quality factors like privacy, integrity, flexibility, usability etc. Moreover, certain quality factors help in each other's existence while others oppose each other significantly. Usability of software applications is one factor that reduces security and privacy up to a substantial level. This paper examines the differences between usability factors and aspects related to security and privacy. A clear understanding of gaps between these two opposing factors has been presented in this paper. In addition, an account of efforts carried out to bridge these gaps has also been presented. We have divided these efforts into the categories of guidelines, frameworks and use of technology. The fields of e-banking and social networks have been considered specifically for identification of gaps in these particular fields.

show abstract

Security and Usability: Analysis and Evaluation

Cited by 89 publications

References 24 publications

Trustworthy and effective communication of cybersecurity risks: A review

Trustworthy and effective communication of cybersecurity risks: A review

Secure Device Pairing Methods: An Overview

A Review of Gaps between Usability and Security/Privacy

Contact Info

Product

Resources

About