User-centered security: stepping up to the grand challenge
User-centered security: stepping up to the grand challenge
复制标题
以用户为中心的安全：迎接巨大挑战
DOI：
--
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
M. Zurko
中科院分区：
文献类型：
--
作者：
M. Zurko
以用户为中心的安全已被确定为信息安全和保证的一个巨大挑战。它即将成为安全和人机界面（HCI）研究的一个既定子域，并对产品开发生命周期产生影响。安全性和HCI都依赖于与用户交互的现实，以证明其工作的实用性和有效性。作为这些领域的从业者和研究人员，我们在应用这些领域中使用的最基本的工具时仍然面临重大问题。本文讨论了以用户为中心的安全必须克服的社会，技术和实用层面的系统性障碍，以取得实质性突破。专家评估和用户测试正在产生有效的可用安全性。安全分级、列举可用性故障风险、综合安全性、透明安全性和依赖可信权威等原则也可以构成改进系统的基础
User-centered security has been identified as a grand challenge in information security and assurance. It is on the brink of becoming an established subdomain of both security and human/computer interface (HCI) research, and an influence on the product development lifecycle. Both security and HCI rely on the reality of interactions with users to prove the utility and validity of their work. As practitioners and researchers in those areas, we still face major issues when applying even the most foundational tools used in either of these fields across both of them. This essay discusses the systemic roadblocks at the social, technical, and pragmatic levels that user-centered security must overcome to make substantial breakthroughs. Expert evaluation and user testing are producing effective usable security today. Principles such as safe staging, enumerating usability failure risks, integrated security, transparent security and reliance on trustworthy authorities can also form the basis of improved systems