MessageGuard: A Browser-based Platform for Usable, Content-Based Encryption Research

作者: Daniel Zappala , Scott Ruoti , Kent E. Seamons , Jeff Andersen , Tyler Monson

DOI:

关键词:

摘要: This paper describes MessageGuard, a browser-based platform for research into usable content-based encryption. MessageGuard is designed to enable collaboration between security and usability researchers on long-standing questions in this area. It significantly simplifies the effort required work space provides place results be shared, replicated, compared with minimal confounding factors. ubiquitous encryption secure cryptographic operations, enabling any existing web application, realistic studies platform. We validate MessageGuard's compatibility performance, we illustrate its utility case Gmail Facebook Chat.

参考文章(36)
James Miller, Philip Kortum, Aaron Bangor, Determining what individual SUS scores mean: adding an adjective rating scale Journal of Usability Studies archive. ,vol. 4, pp. 114- 123 ,(2009)
Alma Whitten, J. D. Tygar, Why Johnny can't encrypt: a usability evaluation of PGP 5.0 usenix security symposium. pp. 14- 14 ,(1999)
Nik Unger, Sergej Dechand, Joseph Bonneau, Sascha Fahl, Henning Perl, Ian Goldberg, Matthew Smith, SoK: Secure Messaging 2015 IEEE Symposium on Security and Privacy. pp. 232- 249 ,(2015) , 10.1109/SP.2015.22
Daniel Zappala, Scott Ruoti, Kent E. Seamons, Jeff Andersen, Why Johnny Still, Still Can't Encrypt: Evaluating the Usability of a Modern PGP Client. arXiv: Cryptography and Security. ,(2015)
Shirley Gaw, Edward W. Felten, Patricia Fernandez-Kelly, Secrecy, flagging, and paranoia: adoption criteria in encrypted email human factors in computing systems. pp. 591- 600 ,(2006) , 10.1145/1124772.1124862
Chris Robison, Scott Ruoti, Timothy W. van der Horst, Kent E. Seamons, Private Facebook Chat privacy security risk and trust. pp. 451- 460 ,(2012) , 10.1109/SOCIALCOM-PASSAT.2012.58
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Confidentiality as a Service -- Usable Security for the Cloud trust security and privacy in computing and communications. pp. 153- 162 ,(2012) , 10.1109/TRUSTCOM.2012.112
Ian D. Foster, Jon Larson, Max Masich, Alex C. Snoeren, Stefan Savage, Kirill Levchenko, Security by Any Other Name: On the Effectiveness of Provider Based Email Security computer and communications security. pp. 450- 464 ,(2015) , 10.1145/2810103.2813607
Dongseok Jang, Ranjit Jhala, Sorin Lerner, Hovav Shacham, An empirical study of privacy-violating information flows in JavaScript web applications computer and communications security. pp. 270- 283 ,(2010) , 10.1145/1866307.1866339
Rachna Dhamija, J. D. Tygar, The battle against phishing: Dynamic Security Skins symposium on usable privacy and security. pp. 77- 88 ,(2005) , 10.1145/1073001.1073009