In search of usable security: Five lessons from the field

IEEE Security and Privacy

Volumn 2, Issue 5, 2004, Pages 19-24

  Balfanz, Dirk ^a   Durfee, Glenn ^a   Smetters, D K ^a   Grinter, Rebecca E ^b,c  

^a PALO ALTO RESEARCH CENTER   (United States)

^b GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

^c Georgia Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION PROTECTION; PUBLIC-KEY INFRASTRUCTURE (PKI); USABILITY; USER SATISFACTION; WIRELESS NETWORKS;

COMPUTER OPERATING SYSTEMS; DESIGN; GRAPHICAL USER INTERFACES; HUMAN COMPUTER INTERACTION; INFORMATION MANAGEMENT; LOCAL AREA NETWORKS; PUBLIC KEY CRYPTOGRAPHY; SECURITY SYSTEMS; STANDARDS; SYSTEMS ANALYSIS; WIRELESS TELECOMMUNICATION SYSTEMS;

SECURITY OF DATA;

EID: 12844272841     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2004.71     Document Type: Review

References (14)

1. J.H. Saltzer and M.D. Schroeder, "The Protection of Information in Computer Systems," Proc. IEEE, vol. 63, no. 9, 1975, pp. 1278-1308.
2. A. Whitten and J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0," Proc. 8th Usenix Security Symp., Usenix Assoc., 1999, pp. 169-184.
3. A. Adams and M.A. Sasse, "Users Are Not the Enemy: Why Users Compromise Computer Security Mechanisms and How to Take Remedial Measures," Comm. ACM, vol. 42, Dec. 1999, pp. 40-46.
4. D.K. Smetters and R.E. Grinter, "Moving from the Design of Usable Security Technologies to the Design of Useful Secure Applications," Proc. New Security Paradigms Workshop 02, ACM Press, 2002, pp. 82-89.
5. Recommendation X. 509: The Directory/Authentication Framework, Consultative Committee on Int'l Telegraphy and Telephony, 1988; www.itu.int/publications/index.html.
6. B. Aboba and D. Simon, "PPP EAP TLS Authentication Protocol (EAP-TLS)," IETF RFC 2716, Oct. 1999; www.ietf.org/rfc/rfc2716.txt.
7. ANSI/IEEE Std. 802. 1x, Port-Based Network Access Control, IEEE, 2001.
8. P. Doyle and S. Hanna, "Analysis of June 2003 Survey on Obstacles to PKI Deployment and Usage," 2003; www.oasis-open.org/committees/pki/ pkiobstaclesjune 2003surveyreport.pdf.
9. D. Balfanz et al., "Network-in-a-Box: How to Set up a Secure Wireless Network in Under a Minute," Proc. 13th Usenix Security Symp., Usenix Assoc., 2004, pp. 207-221.
10. D. Balfanz et al., "Talking to Strangers: Authentication in Ad Hoc Wireless Networks," Proc. 2002 Network and Distributed Systems Security Symp. (NDSS '02), Internet Soc., 2002, pp. 23-35.
11. WK. Edwards et al., "Using Speakeasy for Ad Hoc Peer-to-Peer Collaboration," Proc. ACM 2002 Conf. Computer Supported Cooperative Work (CSCW '02), ACM Press, 2002. pp. 256-265.
12. J. Nielsen and T.K. Landauer, "A Mathematical Model of the Finding of Usability Problems," A CM Conf. Human Factors in Computing Systems (INTER CHI '93), ACM Press, 1993, pp. 206-213.
13. D. Balfanz, "Usable Access Control for the World Wide Web," Proc. Ann. Computer Security Applications Conf., IEEE CS Press, 2003, pp. 406-415.
14. P. Gutmann, "Plug-and-Play PKI: A PKI Your Mother Can Use," Proc. 12th Usenix Security Symp., Usenix Assoc., 2003. pp. 45-58.