2015 Workshop on Socio-Technical Aspects in Security and Trust最新文献

How people help fraudsters steal their money: an analysis of 600 online banking fraud cases 人们如何帮助骗子窃取他们的钱:600起网上银行诈骗案分析

2015 Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2015-07-13 DOI: 10.1109/STAST.2015.12

J. Jansen, E. R. Leukfeldt

引用次数: 27

Regression nodes: extending attack trees with data from social sciences 回归节点:用社会科学的数据扩展攻击树

2015 Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2015-07-13 DOI: 10.1109/STAST.2015.11

Jan-Willem Bullee, Lorena Montoya, W. Pieters, M. Junger, P. Hartel

引用次数: 3

An analysis of social engineering principles in effective phishing 有效网络钓鱼的社会工程原理分析

2015 Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2015-07-13 DOI: 10.1109/STAST.2015.10

A. Ferreira, G. Lenzini

引用次数: 41

A technique for using employee perception of security to support usability diagnostics 一种利用员工对安全性的感知来支持可用性诊断的技术

2015 Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2015-07-13 DOI: 10.1109/STAST.2015.9

S. Parkin, Sanket Epili

引用次数: 0

Alternative Authentication in the Wild 野外的替代身份验证

2015 Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2015-07-13 DOI: 10.1109/STAST.2015.13

Joseph Maguire, K. Renaud

{"title":"Alternative Authentication in the Wild","authors":"Joseph Maguire, K. Renaud","doi":"10.1109/STAST.2015.13","DOIUrl":"https://doi.org/10.1109/STAST.2015.13","url":null,"abstract":"Alphanumeric authentication routinely fails to regulate access to resources with the required stringency, primarily due to usability issues. Initial deployment did not reveal the problems of passwords, deep and profound flaws only emerged once passwords were deployed in the wild. The need for a replacement is widely acknowledged yet despite over a decade of research into knowledge-based alternatives, few, if any, have been adopted by industry. Alternatives are unconvincing for three primary reasons. The first is that alternatives are rarely investigated beyond the initial proposal, with only the results from a constrained lab test provided to convince adopters of their viability. The second is that alternatives are seldom tested realistically where the authenticator mediates access to something of value. The third is that the testing rarely varies the device or context beyond that initially targeted. In the modern world different devices are used across a variety of contexts. What works well in one context may easily fail in another. Consequently, the contribution of this paper is an \"in the wild\" evaluation of an alternative authentication mechanism that had demonstrated promise in its lab evaluation. In the field test the mechanism was deployed to actual users to regulate access to an application in a context beyond that initially proposed. The performance of the mechanism is reported and discussed. We conclude by reflecting on the value of field evaluations of alternative authentication mechanisms.","PeriodicalId":322373,"journal":{"name":"2015 Workshop on Socio-Technical Aspects in Security and Trust","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-07-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130424250","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1