Humans in the loop: Human-computer interaction and security

IEEE Security and Privacy

Volumn 1, Issue 3, 2003, Pages 75-79

  Smith, S W ^a,b  

^a DARTMOUTH COLLEGE   (United States)

^b Dartmouth College   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER DESIGNS; INFRASTRUCTURES; MULTILEVEL SECURITY SYSTEMS (MLS); PASSWORD AUTHENTICATION; PUBLIC KEY INFRASTRUCTURE (PKI);

COMPUTER SIMULATION; COMPUTER SYSTEMS; CRYPTOGRAPHY; DATA PRIVACY; ELECTRONIC DOCUMENT EXCHANGE; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; ELECTRONIC MAIL; NETWORK PROTOCOLS; PUBLIC POLICY; SECURITY OF DATA; SERVERS; USER INTERFACES; WEBSITES;

HUMAN COMPUTER INTERACTION;

EID: 3042740017     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSECP.2003.1203228     Document Type: Review

References (9)

1. C. Kaufman, R. Perlman, and M. Speciner, Network Security: Private Communication in a Public World, 2nd ed., Prentice-Hall, 2002, p. 237.
2. A. Whitten and J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0," Proc. 8th Usenix Sec. Symp., Usenix Assoc., 1999; www-2.cs.cmu.edu/~alma/johnny.pdf.
3. A. Adams and M.A. Sasse, "Users are Not the Enemy: Why Users Compromise Security Mechanisms and How to Take Remedial Measures," Comm. ACM, vol. 42, no. 12, 1999, pp. 41-46.
4. K.-P. Yee, "User Interaction Design for Secure Systems," Proc. 4th Int'l Conf. Info. and Comm. Sec. (ICICS 02), Inst. for Infocomm Research/Chinese Academy of Sciences, 2002.
5. J.H. Saltzer and M.D. Schroeder, "The Protection of Information in Computer Systems," Proc. IEEE, vol. 63, 1975, pp. 1278-1308.
6. E. Ye and S.W. Smith, "Trusted Paths for Browsers," Proc. 11th Usenix Sec. Symp., Usenix Assoc., Berkeley, Calif., 2002, pp. 263-279.
7. K. Kain, S.W Smith, and R. Asokan, "Digital Signatures and Electronic Documents: A Cautionary Tale," Advanced Comm. and Multimedia Security, Kluwer Academic Publishers, pp. 293-307; www.cs.dartmouth.edu/~sws/ papers/cmso2.pdf.
8. J. Marchesini, S.W. Smith, and M. Zhao, "Keyjacking: Risks of the Current Client-Side Infrastructure," Proc. 2nd PKI Research Workshop, Nat'l Inst. Standards and Technology, 2003; http://middleware.internet2.edu/pki03.
9. D. Norman, The Design of Everyday Things, Basic Books, 2002.