Universal Usable Security

计算机安全和隐私影响到计算的方方面面，是所有人都关心的关键问题 用户。虽然低级别的系统和网络安全仍然很重要，但最终用户越来越需要成为维护其计算机安全、保护其重要帐户的凭据以及在线做出隐私和安全决策的积极参与者。安全现在包括让非安全专家，甚至是新手用户，在他们主要关注其他主要任务的同时，定期做出重要的安全决策。我们必须找到方法来设计适合这种新环境的安全系统。我最初把重点放在为儿童和移动用户设计可用的安全上，因为这两个群体越来越多地使用技术，也是攻击的目标。事实上，我认为，迫切需要为儿童和移动用户提供更好的可用安全。 其理论影响是在文献中提供经过充分测试的可用安全的设计原则和设计模式，这些设计原则和设计模式可以作为安全应用程序开发的基础。通过安全软件的实际设计，我希望两组用户的安全都能得到直接和可衡量的改善。对于儿童来说，根据他们的安全心理模型量身定做的警告和安全提示将使他们能够在网上做出更好的安全决策，而根据他们的天赋和能力量身定做的身份验证方案将允许使用更强的密码。安全游戏将为孩子们提供一个安全的环境，让他们探索不同的安全选择，并在试验台上提供拟议的安全设计。对于移动用户，确定用户身份验证和验证码的最佳方法将解决用户的常见抱怨，而改进的权限模型将使用户对已安装的应用程序拥有更多控制权。

Computer security and privacy affect every aspect of computing and are a critical matter of concern for all users. While low-level system and network security remain important, there is an increasing need for end-users to become active participants in maintaining their computer's security, guarding their credentials for important accounts, and making privacy and security decisions online. Security now involves having non-security experts, or even novice users, regularly making important security decisions while their main focus is on other primary tasks. We must find ways to design security systems appropriate for this new environment. I focus on designing usable security for children and mobile users initially because both groups are increasingly using technology and are targets for attacks. In fact, I argue that there is a critical and urgent need for better usable security for both children and mobile users. The theoretical impact is to make available in the literature well-tested design principles and design patterns of usable security that can serve as foundation for development of security applications. Through practical designs of security software, I expect direct and measurable improvements in security for both groups of users. For children, warnings and security cues tailored to their mental models of security will enable them to make better security decisions online, and authentication schemes tailored to their aptitudes and abilities will allow for stronger passwords. A security game will provide a safe environment for children to explore different security choices and provide at testbed for proposed security designs. For mobile users, determining the best methods for user authentication and CAPTCHAs will address a common complaint among users, while improved permission models will give users more control over installed applications.