A Case Study of Usable Security: Usability Testing of Android Privacy Enhancing Keyboard
A Case Study of Usable Security: Usability Testing of Android Privacy Enhancing Keyboard
复制标题
DOI：
10.1007/978-3-319-60033-8_61
复制
发表时间：
2017-06
期刊：
影响因子：
--
通讯作者：
Zhen Ling;Melanie Borgeest;Chuta Sano;Sirong Lin;Mogahid Fadl;Wei Yu;Xinwen Fu;Wei Zhao
中科院分区：
文献类型：
--
作者：
Zhen Ling;Melanie Borgeest;Chuta Sano;Sirong Lin;Mogahid Fadl;Wei Yu;Xinwen Fu;Wei Zhao
我们发明了一种新颖的上下文感知隐私增强键盘(PEK)，用于触摸式设备，以保护用户免受各种密码推断攻击。当用户输入电子邮件或消息等普通文本时，PEK会显示一个普通的QWERTY键盘。然而，每次触摸式设备的用户按下屏幕上的密码输入框时，我们都会随机调整键盘上字符的位置，并将这个随机键盘展示给用户。Pek于2014年在Google Play上发布，但现在的安装数量低于我们的预期。出于可用安全和隐私的目的，我们设计了两个阶段的可用性测试，并进行了广泛的实验，以评估PEK的用户体验，并找出使用PEK不温不火的原因。根据可用性测试的反馈，我们实现了两个新特性来改进PEK。
We invent a novel context aware privacy enhancing keyboard (PEK) for touch-enabled devices to keep users safe from various password inference attacks. When a user inputs normal text like an email or a message, PEK shows a normal QWERTY keyboard. However, every time a user of a touch-enabled device presses a password input box on the screen, we will randomly shuffle the positions of the characters on the keyboard and show this randomized keyboard to the user. PEK was released on the Google Play in 2014, but the number of installations is below our expectation now. For the purpose of usable security and privacy, we design a two-stage usability test and perform extensive experiments to evaluate the user experience of PEK and discover the reason behind the lukewarmness of using PEK. We implement two new features so as to improve PEK based on the feedback of usability tests.