Frontiers of Usable Security – Principles and Methods for Administrator and Developer Usable Security Research

Project Information

USECFrontiers

Grant agreement ID: 678341

DOI

10.3030/678341

Project closed

EC signature date 5 July 2016

Start date 1 August 2016

End date 31 January 2022

Funded under

• EXCELLENT SCIENCE - European Research Council (ERC)

Total cost

€ 1 498 976,00

EU contribution

€ 1 498 976,00

Coordinated by

RHEINISCHE FRIEDRICH-WILHELMS-UNIVERSITAT BONN
Germany

CORDIS provides links to public deliverables and publications of HORIZON projects.

Links to deliverables and publications from FP7 projects, as well as links to some specific result types such as dataset and software, are dynamically retrieved from OpenAIRE .

Publications

Conference proceedings (13)

Code Reviewing as Methodology for Online Security Studies with Developers - A Case Study with Freelancers on Password Storage

Author(s): Anastasia Danilova, Alena Naiakshina, Anna Rasgauski, Matthew Smith
Published in: Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021), 2021
Publisher: USENIX

On Conducting Security Developer Studies with CS Students: Examining a Password-Storage Study with CS Students, Freelancers, and Company Developers

Author(s): Alena Naiakshina Anastasia Danilova Eva Gerlitz Matthew Smith
Published in: Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems, 2020
Publisher: ACM
DOI: 10.1145/3313831.3376791

A Usability Evaluation of Let's Encrypt and Certbot: Usable Security Done Right

Author(s): Christian Tiefenau Emanuel von Zezschwitz Maximilian Häring Katharina Krombholz Matthew Smith
Published in: CCS '19: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019
Publisher: ACM
DOI: 10.1145/3319535.3363220

A Qualitative Usability Evaluation of the Clang Static Analyzer and libFuzzer with CS Students and CTF Players

Author(s): Stephan Plöger Mischa Meier Matthew Smith
Published in: Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021), 2021
Publisher: USENIX

Replication: On the Ecological Validity of Online Security Developer Studies: Exploring Deception in a Password-Storage Study with Freelancers

Author(s): Anastasia Danilova Alena Naiakshina Johanna Deuter Matthew Smith
Published in: Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020), 2020
Publisher: USENIX

Why Do Developers Get Password Storage Wrong? - A Qualitative Usability Study

Author(s): Alena Naiakshina, Anastasia Danilova, Christian Tiefenau, Marco Herzog, Sergej Dechand, Matthew Smith
Published in: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security - CCS '17, 2017, Page(s) 311-328, ISBN 9781-450349468
Publisher: ACM Press
DOI: 10.1145/3133956.3134082

"""If you want, I can store the encrypted password"" - A Password-Storage Field Study with Freelance Developers"

Author(s): Alena Naiakshina, Anastasia Danilova, Eva Gerlitz, Emanuel von Zezschwitz, Matthew Smith
Published in: Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems - CHI '19, 2019, Page(s) 1-12, ISBN 9781-450359702
Publisher: ACM Press
DOI: 10.1145/3290605.3300370

Deception Task Design in Developer Password Studies: Exploring a Student Sample

Author(s): Alena Naiakshina, Anastasia Danilova, Christian Tiefenau, Matthew Smith
Published in: Fourteenth Symposium on Usable Privacy and Security ({SOUPS} 2018), 2018, ISBN 978-1-931971-45-4
Publisher: USENIX

"""If HTTPS Were Secure, I Wouldn't Need 2FA"" - End User and Administrator Mental Models of HTTPS"

Author(s): Katharina Krombholz, Karoline Busse, Katharina Pfeffer, Matthew Smith, Emanuel von Zezschwitz,
Published in: IEEE Symposium on Security and Privacy (SP), 2019
Publisher: IEEE
DOI: 10.1109/sp.2019.00060

Helping Johnny to Analyze Malware: A Usability-Optimized Decompiler and Malware Analysis User Study

Author(s): Khaled Yakdan, Sergej Dechand, Elmar Gerhards-Padilla, Matthew Smith
Published in: 2016 IEEE Symposium on Security and Privacy (SP), 2016, Page(s) 158-177, ISBN 978-1-5090-0824-7
Publisher: IEEE
DOI: 10.1109/sp.2016.18

Replication: No One Can Hack My MindRevisiting a Study on Expert and Non-Expert Security Practices and Advice

Author(s): Karoline Busse, Juila Schäfer, Matthew Smith
Published in: Symposium on Usable Privacy and Security, 2019
Publisher: USENIX

Do you really code?: Designing and Evaluating Screening Questions for Online Surveys with Programmers

Author(s): Anastasia Danilova; Alena Naiakshina; Stefan Horstmann; Matthew Smith
Published in: ICSE '21: Proceedings of the 43rd International Conference on Software, Issue 1, 2021
Publisher: ACM/IEEE
DOI: 10.1109/icse43902.2021.00057

Please do not use !?_ or your License Plate Number: Analyzing Password Policies in German Companies

Author(s): Eva Gerlitz Maximilian Häring Matthew Smith
Published in: Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021), 2021
Publisher: USENIX

Other (1)

Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 19231)

Author(s): Shostack, Adam ; Smith, Matthew ; Weber, Sam ; Zurko, Mary Ellen
Published in: Dagstuhl Reports, 2019
Publisher: Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik
DOI: 10.4230/dagrep.9.6.1

Peer reviewed articles (1)

Developers are Not the Enemy!: The Need for Usable Security APIs

Author(s): Matthew Green, Matthew Smith
Published in: IEEE Security & Privacy, Issue 14/5, 2016, Page(s) 40-46, ISSN 1540-7993
Publisher: IEEE Computer Society
DOI: 10.1109/msp.2016.111