Seeking the philosopher's stone.

Fl�chais, Ivan; Faily, Shamal

Abstract

This article describes the unique challenges facing usable security research and design, and introduces three proposals for addressing these. For all intents and purposes, security design is currently a craft, where quality is dependent on individuals and their ability, rather than on principles and engineering. However, the wide variety of different skills necessary to design secure and usable systems is unlikely to be mastered by many individuals, requiring an unlikely combination of insight and education. Psychology, economics and cryptography have very little in common, and yet all have a role to play in the field of usable security. To address these concerns, three proposals are presented here: 1) to adopt a principled design framework for usable security and privacy; 2) to support a research environment where skills and knowledge can be pooled and shared; and 3) to guide and inform the principles that underpin the educational curriculum of future security engineers and researchers.

Citation

FLÉCHAIS, I. and FAILY, S. 2011. Seeking the philosopher's stone. Interfaces: the quarterly magazine of BCS Interaction Group [online], 86, pages 14-15. Available from: https://www.bcs.org/media/5326/interfaces86-spring2011.pdf

• Journal Article Type: Article
• Acceptance Date: Mar 30, 2011
• Online Publication Date: Mar 30, 2011
• Publication Date: Mar 30, 2011
• Deposit Date: Dec 10, 2021
• Publicly Available Date: Dec 10, 2021
• Journal: Interfaces: the quarterly magazine of BCS Interaction Group
• Print ISSN: 1351-119X
• Publisher: BCS, The Chartered Institute for IT
• Peer Reviewed: Not Peer Reviewed
• Volume: 86
• Pages: 14-15
• Keywords: Systems security; User-centred design; Human-computer interaction (HCI); Software engineering; Requirements engineering
• Public URL: https://rgu-repository.worktribe.com/output/1427740
• Related Public URLs: (Conference version) https://rgu-repository.worktribe.com/output/1545167