Interdisciplinary Research Group in Socio-technical CybersecuritySecure exams despite malicious managementGiampaolo Bella, Rosario Giustolisi, Gabriele LenziniAbstract:An exam is a practise for assessing the knowledge of a candidate from an examination she takes. Exams are used in various contexts, such as in university tests and public competitions. We begin by identifying various security and privacy requirements that … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityProceedings of the 2014 Workshop on Socio-Technical Aspects in Security and Trust, STAST 2014Bella Giampaolo, Lenzini GabrieleAbstract:Authors:Bella Giampaolo, Lenzini GabrielePublication date:July 2014Published in:IEEE Computer SocietyReference:Get in touch with us SnT - Interdisciplinary Centre for Security, Reliability and Trust Maison du Nombre, 6, avenue de la Fonte L-4364 Esch-sur-Alzette info-irisc-lab@uni.lu

Interdisciplinary Research Group in Socio-technical CybersecurityOn the verifiability of (electronic) examsDreier Jannik, Giustolisi Rosario, Kassem Ali, Lafourcade Pascal, Lenzini GabrieleAbstract:The main concern for institutions that organize exams is to detect when students cheat. Actually more frauds are possible and even authorities can be dishonest. If institutions wish to keep exams a trustworthy business, anyone and … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityFormal Analysis of Electronic ExamsJannik Dreier, Rosario Giustolisi, Ali Kassem, Pascal Lafourcade, Gabriele Lenzini, Peter Y. A. RyanAbstract:Universities and other educational organizations are adopting computer and Internet-based assessment tools (herein called e-exams) to reach widespread audiences. While this makes examination tests more accessible, it exposes them to new threats. At … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityA Conceptual Framework to Study Socio-Technical SecurityAna Ferreira, Jean-Louis Huynen, Vincent Koenig, Gabriele LenziniAbstract:We propose an operational framework for a social, technical and contextual analysis of security. The framework provides guidelines about how to model a system as a layered set of interacting elements, and proposes two methodologies to analyse … Continued

Interdisciplinary Research Group in Socio-technical CybersecuritySocio-technical Security Analysis of Wireless HotspotsAna Ferreira, Jean-Louis Huynen, Vincent Koenig, Gabriele LenziniAbstract:We present a socio-technical analysis of security of Hotspot and Hotspot 2.0. The analysis focuses is user-centric, and aim at understanding which user action can compromise security in presence of a attacker. We identify research questions about possible … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityEnvisioning secure and usable access control for patientsAna Ferreira, Gabriele Lenzini, Catia Santos-Pereira, Alexandre B. Augusto, Manuel E. CorreiaAbstract:Several pilot tests show that patients who are able to access their Electronic Health Records (EHR), become more responsible and involved in the maintenance of their health. However, despite technologically feasible and … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityRemark!: A Secure Protocol for Remote ExamsRosario Giustolisi, Gabriele Lenzini, Peter Y. A. RyanAbstract:This manuscript presents Remark!, an electronic exam protocol which achieves several authentication, (conditional) anonymity, privacy, and verifiability properties without trusted third parties. Remark! is primarily designed for invigilated Internet-based exams but it also fits computer-based exams with … Continued

Interdisciplinary Research Group in Socio-technical CybersecurityA Socio-technical Understanding of TLS Certificate ValidationGiampaolo Bella, Rosario Giustolisi, Gabriele LenziniAbstract:To authenticate a web server, modern browsers check whether a TLS certificate is valid. This check is socio-technical because, when the technical validation fails, it may request the user to decide, intertwining the usual technical issues with social elements, … Continued

Interdisciplinary Research Group in Socio-technical CybersecuritySocio-technical formal analysis of TLS certificate validation in modern browsersBella, Giampaolo, Giustolisi Rosario, Lenzini GabrieleAbstract:Authenticating a web server is crucial to the security of web browsing. It relies on TLS certificate validation, a property whose enforcement may require getting the user involved. Thus, certificate validation is a socio-technical property - … Continued