“I personally relate it to the traffic light”: a user study on security & privacy indicators in a secure email system committed to privacy by default

Interdisciplinary Research Group in Socio-technical Cybersecurity“I personally relate it to the traffic light”: a user study on security & privacy indicators in a secure email system committed to privacy by defaultStojkovski Borce, Lenzini Gabriele, Koenig VincentAbstract:Improving the usability and adoption of secure (i.e. end-to-end encrypted) email systems has been a notorious challenge for over two … Continued

Evaluating ambiguity of privacy indicators in a secure email app

Interdisciplinary Research Group in Socio-technical CybersecurityEvaluating ambiguity of privacy indicators in a secure email appStojkovski Borce, Lenzini GabrieleAbstract:Informing laymen of security situations is a notoriously hard problem. Users are usually not cognoscenti of all the various secure and insecure situations that may arise, and this can be further worsened by certain visual indicators that instead … Continued

A Protocol to Strengthen Password-Based Authentication

Interdisciplinary Research Group in Socio-technical CybersecurityA Protocol to Strengthen Password-Based AuthenticationVazquez Sandoval Itzel, Lenzini Gabriele, Stojkovski BorceAbstract:We discuss a password-based authentication protocol that we argue to be robust against password-guessing and o-line dictionary attacks. The core idea is to hash the passwords with a seed that comes from an OTP device, making the resulting identity … Continued