Ivan Fl�chais
Security and usability: searching for the philosopher's stone.
Fl�chais, Ivan; Faily, Shamal
Authors
Shamal Faily
Abstract
This paper describes the unique challenges facing usable security research and design, and introduces three proposals for addressing these. For all intents and purposes security design is currently a craft, where quality is dependent on individuals and their ability, rather than principles and engineering. However, the wide variety of different skills necessary to design secure and usable systems is unlikely to be mastered by many individuals, requiring an unlikely combination of insight and education. Psychology, economics and cryptography have very little in common, and yet all have a role to play in the field of usable security. To address these concerns, three proposals are presented here: to adopt a principled design framework for usable security and privacy, to support a research environment where skills and knowledge can be pooled and shared, and to guide and inform the principles that underpin the educational curriculum of future security engineers and researchers.
Citation
FLÉCHAIS, I. and FAILY, S. 2010. Security and usability: searching for the philosopher's stone. Presented at the Workshop on the development of EuroSOUPS, 24 November 2010, Newcastle, UK. Hosted on CoCoLab.org [online]. Available from: https://www.cocolab.org/soups/eurosoups
Presentation Conference Type | Conference Paper (unpublished) |
---|---|
Conference Name | Workshop on the development of EuroSOUPS |
Conference Location | Newcastle, UK |
Start Date | Nov 24, 2010 |
Deposit Date | Dec 10, 2021 |
Publicly Available Date | Dec 10, 2021 |
Keywords | Systems security; User-centred design; Human-computer interaction (HCI); Software engineering; Requirements engineering |
Public URL | https://rgu-repository.worktribe.com/output/1545167 |
Publisher URL | https://www.cocolab.org/soups/eurosoups |
Related Public URLs | (Journal version) https://rgu-repository.worktribe.com/output/1427740 |
Files
FLÉCHAIS 2010 Security and usability
(142 Kb)
PDF
Related Outputs
Seeking the philosopher's stone.
(2011)
Journal Article
You might also like
Programming language evaluation criteria for safety-critical software in the air domain.
(2022)
Conference Proceeding
Privacy goals for the data lifecycle.
(2022)
Journal Article
Automation and cyber security risks on the railways: the human factors implications.
(2022)
Presentation / Conference
Assessing system of systems information security risk with OASoSIS.
(2022)
Journal Article
Integrated design framework for facilitating systems-theoretic process analysis.
(2022)
Conference Proceeding
Downloadable Citations
About OpenAIR@RGU
Administrator e-mail: publications@rgu.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search