Human Aspects of Cryptography Adoption and Use

NUMMER: 212021
KÜRZEL: HACAU
MODULBEAUFTRAGTE:R: Prof. Dr. Martina Angela Sasse
DOZENT:IN: Prof. Dr. Martina Angela Sasse, M. Sc. Konstantin Fischer
FAKULTÄT: Fakultät für Informatik
SPRACHE: Englisch
SWS: 4 SWS
CREDITS: 5 CP
ANGEBOTEN IM: each winter semester

LINK ZUM VORLESUNGSVERZEICHNIS

Hier entlang.

AKTUELLE TERMINE

course catalog

PRÜFUNGEN

FORM: mündlich
TERMIN: Siehe Prüfungsamt.

LERNFORM

lec­tu­re with tu­to­ri­als

LERNZIELE

The aim of the lec­tu­re is to ex­ami­ne the re­a­sons why

1. cryp­to­gra­phic so­lu­ti­ons – which ex­perts agree offer good pro­tec­tion against most oft the com­mon at­tacks today – are not ad­op­ted by most in­di­vi­du­als and or­ga­ni­sa­ti­ons, and
2. end-users, de­ve­lo­pers and sys­tem ad­mi­nis­tra­tors who do use cryp­to­gra­phic so­lu­ti­ons in some form fre­quent­ly make mis­ta­kes that un­der­mi­ne the se­cu­ri­ty pro­tec­tion.

INHALT

In 1999, Whit­ten & Tygar’s se­mi­nal USE­NIX paper "Why John­ny Can’t En­crypt" es­ta­blis­hed that peop­le can­not use PGP en­cryp­ti­on cor­rect­ly, even with a gra­phi­cal user in­ter­face and in­struc­tion.

Over the past 20 years, there has been a string of John­ny pa­pers on stu­dies try­ing to en­cou­ra­ge ad­op­ti­on or cor­rect usage. The aim of this CASA lec­tu­re is to sys­te­ma­ti­cal­ly ex­ami­ne the re­sults of these stu­dies and iden­ti­fy ef­fec­tive ways of pro­mo­ting ad­op­ti­on and enable cor­rect use of cryp­to­gra­phy.

- Usa­bi­li­ty, uti­li­ty and tech­no­lo­gy ad­op­ti­on
- Se­cu­ri­ty thre­at mo­dels and peop­le’s men­tal mo­dels
- Com­ple­xi­ty or sim­pli­ci­ty – who needs to know what?
- De­si­gning fric­tion­less user jour­neys
- Me­thods for tes­ting and twea­king

VORAUSSETZUNGEN CREDITS

Passed examination

EMPFOHLENE VORKENNTNISSE

Lec­tu­re "In­tro­duc­tion to Usa­ble Se­cu­ri­ty and Pri­va­cy"

SONSTIGE INFORMATIONEN

Rules for win­ter se­mes­ter 2022:

The num­ber of par­ti­ci­pants is li­mi­ted to 30. You have time to enroll until Oct 3, 2022, via e-mail to orga+hac@hcs.rub.de. In your email, plea­se in­clu­de the fol­lowing:

- that you would like to par­ti­ci­pa­te in the cour­se
- the exact name of your study pro­gram, your num­ber of se­mes­ters in this pro­gram so far, and your ma­tri­cu­la­ti­on num­ber
- which cour­ses with re­le­van­ce to this lec­tu­re you have al­re­a­dy at­ten­ded (e.g. HCS + mob­sec lec­tu­res, se­mi­nars, in­ternships)

If you like, you may also add 1-2 sen­ten­ces of mo­ti­va­ti­on.