CHORUS Lab

Carleton's Human Oriented Research in Usable Security Lab

 

Publication

SOUPS 2015 presentations

by

Michael Lutaaya will be presenting a SOUPS 2015 poster, Password Rehearsal Memory Games,  describing his work on a quick game to help users memorize a randomly generated password.  Michael worked on this project as a first year undergraduate researcher in the lab. PhD student Leah Zhang-Kennedy will be presenting a SOUPS 2015 poster entitled Geo-Phisher: The Design of a Global Phishing Trend Visualization Tool based on a project completed with Elias Fares, an HCI student.  Their tool … [Read more...] about SOUPS 2015 presentations

SOUPS paper accepted

by

Our paper, entitled User Perceptions of Sharing, Advertising, and Tracking, was accepted at SOUPS 2015.  Farah started this research while taking the Computer Security & Usability graduate course, then continued the work in the following months.  She explores users' opinion and preferences of online behavioural advertising across a variety of websites and tracking prevention tools. … [Read more...] about SOUPS paper accepted

Phishing paper to be published

by

We are pleased to announce that our recent paper,  Why phishing still works: user strategies for combating phishing attacks, will be published in the International Journal of Human Computer Studies. A pre-print will be available shortly.  Here is the abstract: We have conducted a user study to assess whether improved browser security indicators and increased awareness of phishing have led to users' improved ability to protect themselves against such attacks. Participants were shown a … [Read more...] about Phishing paper to be published

new DESI journal article on Password Expiration

by

We are happy to announce that our journal paper, Quantifying the Security Advantage of Password Expiration Policies, will appear in an upcoming issue of Springer's Designs, Codes and Cryptography.  A pre-print authors' copy is available on our publications page. The abstract of the paper is as follows: Many security policies force users to change passwords within fixed intervals, with the apparent justification that this improves overall security. However, the implied security benefit has … [Read more...] about new DESI journal article on Password Expiration