Secure or usable?

IEEE Security and Privacy

Volumn 2, Issue 5, 2004, Pages 16-18

  Cranor, Lorrie Faith ^a   Garfinkel, Simson ^b,c  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^c MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CHALLENGE-QUESTION SYSTEMS; PASSWORDS; USABILITY; USER AUTHENTICATION;

AUTOMATIC TELLER MACHINES; COMPUTER SOFTWARE; CRYPTOGRAPHY; ELECTRONIC MAIL; EXPERT SYSTEMS; HUMAN COMPUTER INTERACTION; INTELLECTUAL PROPERTY; INTERFACES (COMPUTER); PROBLEM SOLVING; PRODUCT DEVELOPMENT; SECURITY SYSTEMS; STUDENTS; TECHNICAL PRESENTATIONS;

SECURITY OF DATA;

EID: 12844259531     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2004.69     Document Type: Review

References (5)

1. J. Saltzer and M. Schroeder, "The Protection of Information in Computer Systems," Proc. IEEE, vol. 63, no. 9, 1975, pp. 1278-1308.
2. D. Norman, "Design Rules Based on Analyses of Human Error," Comm. ACM, vol. 26, no. 4, 1983, pp. 254-258.
3. A. Whitten and J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0," Proc. 8th Usenix Security Symp., Usenix Assoc., 1999, pp. 169-184.
4. A. Adams and M.A. Sasse, "Users Are Not the Enemy," Comm. ACM, vol. 42, no. 12, 1999, pp. 41-46.
5. D. Davis, E Monrose, and M.K. Reiter, "On User Choice in Graphical Password Schemes," Proc. 13th Usenix Security Symp., Usenix Assoc., 2004, pp. 151-164.