University of Oxford Logo University of OxfordDepartment of Computer Science - Home

Security and Usability: Analysis and Evaluation

Ronald Kainda‚ Ivan Flechais and A.W Roscoe

Abstract

The differences between the fields of Human-Computer Interaction and Security (HCISec) and Human-Computer Interaction (HCI) have not been investigated very closely. Many HCI methods and procedures have been adopted by HCISec researchers, however the extent to which these apply to the field of HCISec is arguable given the fine balance between improving the ease of use of a secure system and potentially weakening its security. That is to say that the techniques prevalent in HCI are aimed at improving users' effectiveness, efficiency or satisfaction, but they do not take into account the potential threats and vulnerabilities that they can introduce. To address this problem, we propose a security and usability threat model detailing the different factors that are pertinent to the security and usability of secure systems, together with a process for assessing these.

Details

Book Title

Availability‚ Reliability and Security‚ 2010. ARES 10. Fifth International Conference on

Chapter

Security and Usability: Analysis and Evaluation

Journal

Availability‚ Reliability and Security‚ 2010. ARES 10. Fifth International Conference on

Year

2010

Links

BibTeX

Related pages

People