Usable Security

file

Visible to the public Improving Cybersecurity Through Human Systems Integration 29 June 2016

Advanced Persistent Threat (APT) attackers accomplish their attack objectives by co-opting users' credentials. Traditional cyber defenses leave users vulnerable to APT attacks which employ spearphishing. The success of spearphishing attacks is not a data processing failure, but is the result of defenders failing to apply the principles of Human System Integration to the problem of spearphishing. We discuss an alternative defensive strategy which addresses human performance capabilities and limitations to disrupt spearphishing attacks.

event

Visible to the public  37th IEEE Symposium on Security and Privacy
May 23, 2016 8:00 am - May 26, 2016 5:00 pm CDT

Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. The 2016 Symposium will mark the 37th annual meeting of this flagship conference.

The Symposium will be held on May 23-25, and the Security and Privacy Workshops will be held on May 26, 2016. Both events will be in San Jose, California at The Fairmont.

file

Visible to the public Spearphishing Defense Through Improved Usability

The information environment consists of three interrelated dimensions which are the physical, the informational and the cognitive. The most important of these is the cognitive dimension which encompasses the minds of people who interact with information and make decisions using information. Employing cyberspace operations, attackers use spearphishing to engage in espionage, sabotage and other intelligence-related activities. We discuss the use of an enhanced user interface as a means of counterintelligence to disrupt spearphishing attacks.

event

Visible to the public  36th IEEE Symposium on Security and Privacy
May 18, 2015 8:00 am - May 21, 2015 5:00 pm CDT

Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. The 2015 Symposium will mark the 36th annual meeting of this flagship conference.

The Symposium will be held on May 18-20, and the Security and Privacy Workshops will be held on May 21, 2015. Both events will be in San Jose, California at The Fairmont.

event

Visible to the public  35th IEEE Symposium on Security and Privacy
May 18, 2014 8:00 am - May 21, 2014 5:00 am PDT

Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for presenting developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. The 2014 Symposium will mark the 35thannual meeting of this flagship conference.

The Symposium will be held on May 18-21, 2014 in San Jose, California at The Fairmont.

*More here