Security And Usability

There's growing recognition that the computer industry can solve network security problems only by addressing issues of software usability and "the human factor". This landmark book contains a collection of articles written by security experts on how the interaction between humans and computers impact today's security problems. It's the first book on a topic that will only grow in importance.

Dr. Lorrie Faith Cranor is an Associate Research Professor in the School of Computer Science at Carnegie Mellon University. She is a faculty member in the Institute for Software Research, International and in the Engineering and Public Policy department. She is director of the CMU Usable Privacy and Security Laboratory (CUPS).

Simson Garfinkel is a journalist, entrepreneur, and international authority on computer security. Garfinkel is chief technology officer at Sandstorm Enterprises, a Boston-based firm that develops state-of-the-art computer security tools.

Preface

ix

Part One Realigning Usability and Security

xxi

Psychological Acceptability Revisited

1

(12)

Matt Bishop

Usable Security

13

(18)

M. Angela Sasse

Ivan Flechais

Design for Usability

31

(16)

Bruce Tognazzini

Usability Design and Evaluation for Privacy and Security Solutions

47

(28)

Clare-Marie Karat

Carolyn Brodie

John Karat

Designing Systems That People Will Trust

75

(26)

Andrew S. Patrick

Pamela Briggs

Stephen Marsh

Part Two AUTHENTICATION MECHANISMS

101

(144)

Evaluating Authentication Mechanisms

103

(26)

Karen Renaud

The Memorability and Security of Passwords

129

(14)

Jeff Yan

Alan Blackwell

Ross Anderson

Alasdair Grant

Designing Authentication Systems with Challenge Questions

143

(14)

Mike Just

Graphical Passwords

157

(18)

Fabian Monrose

Michael K. Reiter

Usable Biometrics

175

(24)

Lynne Coventry

Identifying Users from Their Typing Patterns

199

(22)

Alen Peacock

Xian Ke

Matt Wilkerson

The Usability of Security Devices

221

(24)

Ugo Piazzalunga

Paolo Salvaneschi

Paolo Coffetti

Part Three SECURE SYSTEMS

245

(134)

Guidelines and Strategies for Secure Interaction Design

247

(28)

Ka-Ping Yee

Fighting Phishing at the User Interface

275

(18)

Robert C. Miller

Min Wu

Sanitization and Usability

293

(26)

Simson Garfinkel

Making the Impossible Easy: Usable PKI

319

(16)

Dirk Balfanz

Glenn Durfee

D. K. Smetters

Simple Desktop Security with Chameleon

335

(22)

A. Chris Long

Courtney Moskowitz

Security Administration Tools and Practices

357

(22)

Eser Kandogan

Eben M. Haber

Part Four PRIVACY AND ANONYMITY SYSTEMS

379

(182)

Privacy Issues and Human-Computer Interaction

381

(20)

Mark S. Ackerman

Scott D. Mainwaring

A User-Centric Privacy Space Framework

401

(20)

Benjamin Brunk

Five Pitfalls in the Design for Privacy

421

(26)

Scott Lederer

Jason I. Hong

Anind K. Dey

James A. Landay

Privacy Policies and Privacy Preferences

447

(26)

Lorrie Faith Cranor

Privacy Analysis for the Casual User with Bugnosis

473

(22)

David Martin

Informed Consent by Design

495

(28)

Batya Friedman

Peyina Lin

Jessica K. Miller

Social Approaches to End-User Privacy Management

523

(24)

Jeremy Goecks

Elizabeth D. Mynatt

Anonymity Loves Company: Usability and the Network Effect

547

(14)

Roger Dingledine

Nick Mathewson

Part Five COMMERCIALIZING USABILITY: THE VENDOR PERSPECTIVE

561

(76)

ZoneAlarm: Creating Usable Security Products for Consumers

563

(14)

Jordy Berson

Firefox and the Worry-Free Web

577

(12)

Blake Ross

Users and Trust: A Microsoft Case Study

589

(18)

Chris Nodder

IBM Lotus Notes/Domino: Embedding Security in Collaborative Applications

607

(16)

Mary Ellen Zurko

Achieving Usable Security in Groove Virtual Office

623

(14)

George Moromisato

Paul Boyd

Nimisha Asthagiri

Part Six THE CLASSICS

637

(56)

Users Are Not the Enemy

639

(12)

Anne Adams

M. Angela Sasse

Usability and Privacy: A Study of KaZaA P2P File Sharing

651

(18)

Nathaniel S. Good

Aaron Krekelberg

Why Johnny Can't Encrypt

669

(24)

Alma Whitten

J.D. Tygar

Index

693

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Security And Usability

Summary

Author Biography

Table of Contents

Supplemental Materials