Usable Security: Quo Vadis? Konstantin (Kosta) Beznosov Laboratory - PowerPoint PPT Presentation

T H E U N I V E R S I T Y O F B R I T I S H C O L U M B I A Usable Security: Quo Vadis? Konstantin (Kosta) Beznosov Laboratory for Education and Research in Secure Systems Engineering lersse.ece.ubc.ca Electrical and Computer Engineering

I ’ m a security engineering guy who also works in HSISec research projects P 1 P n S C http://konstantin.beznosov.net http://lersse.ece.ubc.ca Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

HCISec today is up … for a low hanging fruit ≈ 160 publications 80% in last 7 years Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

passwords, phishing, messaging important … but what about windows? Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

if the rest is not secure & usable locks won ’ t help Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

“the rest” is … policies & mechanisms how to device  authentication  select  cell phones  access control  acquire  PDAs  audit  install  pods  detection  integrate  laptops  confidentiality  configure  desktops  integrity  figure it out  servers  “privacy”  keep up-to-date  grids  recovery  use  monitor scale expertise level  notify  individuals  novice  react  groups  competent  replace  departments  power  organizations  admins Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

challenges HCISec folks 1. make the previous list green 2. better understand end users 3. standardized methodologies, benchmarks, and tools for usability evaluation security folks 1. make usability evaluation on par with • security analysis • performance evaluation Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security

Konstantin (Kosta) Beznosov http://konstantin.beznosov.net Laboratory for Education and Research in Secure Systems Engineering (LERSSE) http://lersse.ece.ubc.ca Kosta Beznosov (lersse.ece.ubc.ca) Usability & Security