Secure Interaction Design

Pingster writes "Next week, ICICS 2002 will take place in Singapore. Out of 40 papers at the conference, there will be just one paper that looks at human factors. Though many people know that usability problems can render even the strongest security useless, the security community has only recently started paying attention to usability issues. More serious thinking about usability and security is desperately needed. The paper proposes ten interaction design principles. Maybe you'll find them obvious; maybe you'll disagree with them entirely. Great! Let's have a discussion."

Comments

Re:10 for 10's sake

[Pingster]

> I would be embarassed to have my name associated with that list.

Okay. Could you propose a better set of guidelines, or at least suggest some constructive revisions?

-- ?!ng

Outlook exploits have been doing this for years...

[The-Perl-CD-Bookshel]

From the article: Clarity. The effect of any security-relevant action must be clearly apparent to the user before the action is taken.

Is this like clicking on that attachment that says "I_love_you.vbs" in Outlook? Or should the computer produce some sort of audible warning on mouse-over?

silly boy.

[twitter]

What a flame. Is that how you got all those -1 flamebait mods? Everything offensive, where to start?

Poorly organized. Lynx-optimized website (with only two pages)

You would prefer Power Point slides as an invitiation? What's missing?

only two months to write papers,

You don't think people have papers ready? Whole books have been written on the subject.

an overly broad topic,

Yah, yah, security is like that.

and being held in a pseudo-third world country away from the main countries where most research is being done

Kiss my ass. What godforsaken little grey town are you from to brag about? Got any chip fab nearby?

I'll be surprised if they register more than 500 attendees.

Singapore might have more than that in it's LUG. The only problem these folks might have is that one or two of them take Windoze seriously, but that will be corrected when the presentations hit the screens and the questions bubble up and the truth is found.