Security Solution based on Latest Human Science Study

近年来，钓鱼、弱密码或不慎感染恶意软件等用户误操作造成的安全损失不断增加。在这项研究中，我们探讨了如何通过引入各种人类科学研究的最新成果来提高安全性，如可用性工程、教育工程或认知科学，具体包括以下三个方面：1)基于认知科学的最新知识开发基于口令的认证方案，同时获得可记忆性和安全性；2)建立引入教育工程最新知识的安全教育系统的设计方法；3)为最终用户开发实现可用性的安全工具或系统。

Recently, security damages caused by users' missuse such as phishing, weak password or inadvertent malware infection are increasing. In this research, we investigate how to improve security by introducing the latest result of various human science study such as usability engineering, education engineering, or cognitive science.Specifically, we consider the following three subjects: 1) development of password-based authentication schemes based on the latest knowledge of cognitive science which attains both memorability and security, 2) establishment of the design method of education system of security which introduces the latest knowledge of education engineering, and 3) development of security tools or system for end users which realize usability.