CHORUS Lab

Carleton's Human Oriented Research in Usable Security Lab

 

Conference

GRAND 2011 Conference

by

We've recently returned from beautiful Vancouver for the 2nd Annual GRAND Conference.  We are part of projects on "Usable Privacy and Security for New Media Environments" and "Digital Games for Learning and Training". It was an opportunity to discuss on-going projects, get feedback from others in different disciplines, talk about research priorities, and plan for the next year. … [Read more...] about GRAND 2011 Conference

ISSNet Annual Workshop

by

We spent a week in Toronto for the ISSNet Annual Workshop.  We heard updates on recent work on research projects in all three themes (Network-oriented Security, Software Systems-oriented Security, Human-oriented Security) and had plenty of opportunity to catch up and discuss research with members from other Universities and industry partners. Students presented posters of their on-going research projects.  Invited talks by Nart Villeneuve from Trend Micro and by N. Asokan and Valtteri Niemi from … [Read more...] about ISSNet Annual Workshop

Back from FC’11

by

We just returned from Financial Cryptography '11 in St. Lucia. I was pleasantly surprised to see that several of the papers addressed human factors and usable security. Our workshop on Authentication was well-attended and generated lots of questions and discussion between attendees and panelists. And in between, I managed to get in lots of scuba diving. A great trip overall.   … [Read more...] about Back from FC’11

ACSAC 2010

by

We've just returned from ACSAC 2010 in Austin, Texas. What a change from the winter weather in Canada!  Another highlight was the "Security blankets" that they gave us instead of the usual conference bag. Elizabeth presented our paper on the first day.   It was the only usable security paper at the conference, but there was lots of audience interest and questions. Tom Longstaff's invited talk about the experimental process and the importance of gathering real data resulted in lively … [Read more...] about ACSAC 2010

FC'11 Workshop on User Authentication

by

We are organizing  a workshop on user authentication, co-located with Financial Cryptography 2011 in St. Lucia on March 4, 2011.  The workshop will consist of invited talks and expert panels. A preliminary program is available and will be updated as details are finalized. Workshop on The Future of User Authentication and Authorization on the Web: Challenges in Current Practice, New Threats, and Research Directions Friday, March 4, 2011 ---  St. Lucia … [Read more...] about FC'11 Workshop on User Authentication

PST 2010

by

Last week, IEEE's Privacy, Security, Trust conference (PST) was held here in Ottawa. The talks were an interesting mix ranging from very technical to public policy topics. I taught a half-day tutorial introducing usable security and how to run usability evaluations. We had a paper on using eye-gaze as a tool to predict likely click-based graphical password click-points: Guessing Click-Based Graphical Passwords by Eye Tracking (2010). Daniel LeBlanc, Alain Forget, Robert Biddle. … [Read more...] about PST 2010

ISSNet Summer School

by

After SOUPS, we went directly to Vancouver for the 2nd annual ISSNet Summer School held at UBC.  We had a week of tutorials on different security topics, with lots of opportunity to get to know the other members of ISSNet. Our UBC hosts were great, and organized lots of social events around the technical program. … [Read more...] about ISSNet Summer School

SOUPS and USER at Microsoft

by

SOUPS and USER were hosted at Microsoft in Redmond, WA this week. It was great to see everyone again and meet new people working in usable security. Our workshop went well, we were lucky to have several interesting papers/talks and great experts for the panel. I like SOUPS, authors of papers seem to really engage in trying to balance or increase both usability and security.  We had a couple of posters, Alain presented one about our recent CHI paper, and I presented one about our MVP framework … [Read more...] about SOUPS and USER at Microsoft