Information Security and Privacy Research
Information Security and Privacy Research
复制标题
信息安全与隐私研究
DOI：
10.1007/978-3-642-30436-1_23
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Bella G
中科院分区：
文献类型：
--
作者：
Bella G
安全仪式扩展了一个安全协议，包含了所有被认为是带外的东西。值得注意的是，它包含了用户，根据他们的信仰体系和文化价值观，他们可能会成为社会工程攻击的不同目标。这使得仪式复杂多变，因此需要对仪式进行形式分析，以达到对仪式的严格理解，而形式分析又需要澄清仪式结构，建立仪式模型。这里定义的模型跨越了许多社会技术层面，从计算机网络到社会。它激发了对安全仪式的分层分析，即逐层分析。本文重点介绍了人机交互层，其特点是用户角色和计算机界面之间的社会技术协议。未来的工作将是通过形式分析来遍历所有层。
A security ceremony expands a security protocol with everything that is considered out of band for it. Notably, it incorporates the user, who, according to their belief systems and cultural values, may be variously targeted by social engineering attacks. This makes ceremonies complex and varied, hence the need for their formal analysis aimed at their rigorous understanding.Formal analysis in turn requires clarifying the ceremony structure to build a ceremony model. The model defined here spans over a number of socio-technical layers, ranging from a computer network to society. It inspires a layered analysis of security ceremonies, that is layer by layer. This paper focuses on the human-computer interaction layer, which features a socio-technical protocol between a user persona and a computer interface. Future work will be to traverse all layers by formal analysis.