Studying Access-control Usability in the Lab: Lessons Learned from Four Studies

Kami Vaniea; Lujo Bauer; Lorrie Faith Cranor; Michael K. Reiter

doi:10.1145/2379616.2379621

Studying Access-control Usability in the Lab: Lessons Learned from Four Studies

Kami Vaniea, Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract / Description of output

In a series of studies, we investigated a user interface intended to help users stay aware of their access-control policy even when they are engaged in another activity as their primary task. Methodological issues arose in each study, which impacted the results. We describe the difficulties encountered during each study, and changes to the methodology designed to overcome those difficulties. Through this process, we shed light on the challenges intrinsic to many studies that examine security as a secondary task, and convey a series of lessons that we hope will help other researchers avoid some of the difficulties that we encountered.

Original language	English
Title of host publication	Proceedings of the 2012 Workshop on Learning from Authoritative Security Experiment Results
Place of Publication	New York, NY, USA
Publisher	ACM
Pages	31-40
Number of pages	10
DOIs	https://doi.org/10.1145/2379616.2379621
Publication status	Published - 2012

Keywords / Materials (for Non-textual outputs)

access control, human factors, methodology, privacy, visualization

Access to Document

10.1145/2379616.2379621

http://doi.acm.org/10.1145/2379616.2379621

Cite this

@inproceedings{5dce298bcb654c939b03e481d68445c2,

title = "Studying Access-control Usability in the Lab: Lessons Learned from Four Studies",

abstract = "In a series of studies, we investigated a user interface intended to help users stay aware of their access-control policy even when they are engaged in another activity as their primary task. Methodological issues arose in each study, which impacted the results. We describe the difficulties encountered during each study, and changes to the methodology designed to overcome those difficulties. Through this process, we shed light on the challenges intrinsic to many studies that examine security as a secondary task, and convey a series of lessons that we hope will help other researchers avoid some of the difficulties that we encountered.",

keywords = "access control, human factors, methodology, privacy, visualization",

author = "Kami Vaniea and Lujo Bauer and Cranor, {Lorrie Faith} and Reiter, {Michael K.}",

year = "2012",

doi = "10.1145/2379616.2379621",

language = "English",

pages = "31--40",

booktitle = "Proceedings of the 2012 Workshop on Learning from Authoritative Security Experiment Results",

publisher = "ACM",

}

TY - GEN

T1 - Studying Access-control Usability in the Lab: Lessons Learned from Four Studies

AU - Vaniea, Kami

AU - Bauer, Lujo

AU - Cranor, Lorrie Faith

AU - Reiter, Michael K.

PY - 2012

Y1 - 2012

N2 - In a series of studies, we investigated a user interface intended to help users stay aware of their access-control policy even when they are engaged in another activity as their primary task. Methodological issues arose in each study, which impacted the results. We describe the difficulties encountered during each study, and changes to the methodology designed to overcome those difficulties. Through this process, we shed light on the challenges intrinsic to many studies that examine security as a secondary task, and convey a series of lessons that we hope will help other researchers avoid some of the difficulties that we encountered.

AB - In a series of studies, we investigated a user interface intended to help users stay aware of their access-control policy even when they are engaged in another activity as their primary task. Methodological issues arose in each study, which impacted the results. We describe the difficulties encountered during each study, and changes to the methodology designed to overcome those difficulties. Through this process, we shed light on the challenges intrinsic to many studies that examine security as a secondary task, and convey a series of lessons that we hope will help other researchers avoid some of the difficulties that we encountered.

KW - access control, human factors, methodology, privacy, visualization

U2 - 10.1145/2379616.2379621

DO - 10.1145/2379616.2379621

M3 - Conference contribution

SP - 31

EP - 40

BT - Proceedings of the 2012 Workshop on Learning from Authoritative Security Experiment Results

PB - ACM

CY - New York, NY, USA

ER -

Studying Access-control Usability in the Lab: Lessons Learned from Four Studies

Abstract / Description of output

Keywords / Materials (for Non-textual outputs)

Access to Document

Fingerprint

Cite this