Simson Garfinkel

Lorrie Faith Cranor

Human factors and usability issues have traditionally played a limited role in security research and secure systems development. Security experts have largely ignored usability issues--both because they often failed to recognize the importance of human factors and because they lacked the expertise to address them. But there is a growing recognition that today's security problems can be solved only by addressing issues of usability and human factors. Increasingly, well-publicized security breaches are attributed to human errors that might have been prevented through more usable software. Indeed, the world's future cyber-security depends upon the deployment of security technology that can be broadly used by untrained computer users. Still, many people believe there is an inherent tradeoff between computer security and usability. It's true that a computer without passwords is usable, but not very secure. A computer that makes you authenticate every five minutes with a password and a fresh drop of blood might be very secure, but nobody would use it. Clearly, people need computers, and if they can't use one that's secure, they'll use one that isn't. Unfortunately, unsecured systems aren't usable for long, either. They get hacked, compromised, and otherwise rendered useless. There is increasing agreement that we need to design secure systems that people can actually use, but less agreement about how to reach this goal. Security & Usability is the first book-length work describing the current state of the art in this emerging field. Edited by security experts Dr. Lorrie Faith Cranor and Dr. Simson Garfinkel, and authored by cutting-edge security and human-computerinteraction (HCI) researchers world-wide, this volume is expected to become both a classic reference and an inspiration for future research. Security & Usability groups 34 essays into six parts: Realigning Usability and Security---with careful attention to user-centered design principles, security and usability can be synergistic. Authentication Mechanisms-- techniques for identifying and authenticating computer users. Secure Systems--how system software can deliver or destroy a secure user experience. Privacy and Anonymity Systems--methods for allowing people to control the release of personal information. Commercializing Usability: The Vendor Perspective--specific experiences of security and software vendors (e.g.,IBM, Microsoft, Lotus, Firefox, and Zone Labs) in addressing usability. The Classics--groundbreaking papers that sparked the field of security and usability. This book is expected to start an avalanche of discussion, new ideas, and further advances in this important field.

Designing Secure Systems that People Can Use

Security and Usability

A landmark compilation of essays by security experts addresses the impact on today's common security problems of human-computer interaction, discussing the link between issues of software usability and network security problems, future cyber-security, the challenges confronting designers of security and privacy software, potential solutions, and more. Original. (Intermediate-Advanced)

Steven S. Wildman

Contributors to this volume explore the dynamics of new communications technologies and public policy; from TPRC 2002. The contributors to this volume examine issues raised by the intersection of new communications technologies and public policy in this post-boom, post-bust era. Originally presented at the 30th Research Conference on Communication, Information, and Internet Policy (TPRC 2002)—traditionally a showcase for the best academic research on this topic—their work combines hard data and deep analysis to explore the dynamic interplay between technological development and society.The chapters in the first section consider the ways society conceptualizes new information technologies and their implications for law and policy, examining the common metaphor of "cyberspace as place," alternative definitions of the Internet, the concept of a namespace, and measures of diffusion. The chapters in the second section discuss how technological change may force the rethinking of legal rights; topics considered include spectrum rights, intellectual property, copyright and "paracopyright," and the abridgement of constitutional rights by commercial rights in ISP rules. Chapters in the third and final section examine the constant adjustment and reinterpretation of regulations in response to technological change, considering, among other subjects, liability regimes for common carriers and the 1996 detariffing rule, privacy and enhanced 911, and the residual effect of state ownership on privatized telecommunication carriers. The policy implications of Rethinking Rights and Regulations are clear: major institutional changes may be the necessary response to major advances in telecommunications technology.

Lorrie Faith Cranor

Books

Your next favorite book is out there