A usability study of security policy management

IFIP International Federation for Information Processing

Volumn 201, Issue , 2006, Pages 296-306

  Herzog, Almut ^a   Shahmehri, Nahid ^a  

^a LINKÖPING UNIVERSITY   (Sweden)

Author keywords

[No Author keywords available]

Indexed keywords

GRAPHICAL USER INTERFACES; JAVA PROGRAMMING LANGUAGE; SECURITY OF DATA; SECURITY SYSTEMS; SEMANTICS; USER INTERFACES;

ERROR PRONE TASKS; SECURITY POLICY; SECURITY POLICY MANAGEMENT; SECURITY TOOLS; SECURITY-CRITICAL; SUN MICROSYSTEMS; USABILITY PROBLEMS; USABILITY STUDIES;

USABILITY ENGINEERING;

EID: 33845528583     PISSN: 15715736     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-33406-8_25     Document Type: Article

References (26)

1. Furnell, SEM.: Using security: easier said than done. Computer Fraud & Security 2004(4) (2004) 6-10
2. Whitten, A, Tygar, J.D.: Why Johnny can't encrypt: A usability evaluation of PGP 5.0. In: Proceedings of the 8th USENIX Security Symposium (Security'99), Usenix (1999)
3. Sun Microsystems Inc.: Policy tool - policy file creation and management tool. http://java.sun.com/j2se/l.5.0/docs/tooldocs/solaris/ policytool.html (2002)
4. Nielsen, J.: Usability Engineering. Morgan Kaufmann Publishers, Inc (1993)
5. Oaks, S.: Java Security. 2nd edn. O'Reilly & Associates, Inc. (2001)
6. Faulkner, X.: Usability Engineering. Macmillan Press Ltd (2000)
7. Shneiderman, B., Plaisant, C.: Designing the User Interface. 4th edn. Addison Wesley (2004)
8. Gerd tom Markotten, D.: Benutzbare Sicherheit in informationstechnischen Systemen. Rhombos Verlag, Berlin (2004) ISBN 3-937231-06-4.
9. Hauswirth, M., Kerer, C., Kurmanowytsch, R.: A secure execution framework for Java. In: Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS'00), ACM Press (2000) 43-52
10. Koved, L., Pistoia, M., Kershenbaum, A.: Access rights analysis for Java. In: Proceedings of the 17th ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA'02), ACM Press (2002) 359-372
11. Mehta, N.V., Sollins, K.R.: Expanding and extending the security features of Java. In: Proceedings of the 7th USENIX Security Symposium (Security'98), Usenix (1998)
12. Corradi, A, Montanari, R., Lupu, E., Sloman, M., Stefanelli, C.: A flexible access control service for Java mobile code. In: Proceedings of the 16th Annual Computer Security Applications Conference (ACSAC'00), IEE (2000) 356-365
13. Venkatakrishnan, V., Peri, R., Sekar, R.: Empowering mobile code using expressive security policies. In: Proceedings of the New Security Paradigms Workshop (NSPW'02), ACM Press (2002) 61-68
14. Hertzum, M., Jørgensen, N., Nørgaard, M.: Usable security and e-banking: Ease of use vis-à-vis security. In: Proceedings of the Annual Conference of CHISIG (OZCHI'04). (2004)
15. Nilsson, M., Adams, A., Herd, S.: Building security and trust in online banking. In: Proceedings of the Conference on Human Factors in Computing Systems (CHI'05), ACM Press (2005) 1701-1704
16. Furnell, S.M.: Why users cannot use security. Computers & Security 24(4) (2005) 274-279
17. Johnston, J., Eloff, J.H.P., Labuschagne, L.: Security and human computer interfaces. Computers & Security 22(8) (2003) 675-684
18. Wool, A.: The use and usability of direction-based filtering in firewalls. Computers & Security 23(6) (2004) 459-468
19. Sandhu, R.S.: Good-enough security. IEEE Internet Computing 7(1) (2003) 66-68
20. Smetters, D., Grinter, R.E.: Moving from the design of usable security technologies to the design of useful secure applications. In: Proceedings of the New Security Paradigms Workshop (NSPW'02), ACM Press (2002) 82-89
21. Whitten, A., Tygar, J.: Safe staging for computer security. In: Proceedings of the CHI2003 Workshop on Human-Computer Interaction and Security Systems. (2003)
22. DiGioia, P., Dourish, P.: Social navigation as a model for usable security. In: Proceedings of the Symposium on usable privacy and security (SOUPS'05), ACM Press (2005) 101-108
23. Yee, K.P.: Guidelines and strategies for secure interaction design. [26]
24. Leveson, N.: Safeware: System Safety and Computers. Addison Wesley (1995)
25. Garfinkel, S.L.: Design Principles and Patterns for Computer Systems That Are Simultaneously Secure and Usable. PhD thesis, Massachusetts Institute of Technology (2005)
26. Cranor, L.F., Garfinkel, S.L.: Security and Usability. O'Reilly & Associates, Inc (2005)