Event

The "Security, Usability, and Society" internship covers topics such as user-friendly security and data protection programs, as well as the conduct of user studies. The kick-off and final presentations will take place in English. The language of communication with the supervisors can also be carried out in German, depending on the topic/maintainer.

Important data:

Kick-off: (with obligation to be present) 3.11.2020, 10:00-11:30, online. Link: Microsoft Teams

Final submission:14.03.2021, 23:59

Presentation:March 14, 2021

Topics:

Privacy-friendly apps

In this subject, students complete an app (or an extension of an app) among our privacy-friendly apps. Click the following link to learn more about it: https://secuso.aifb.kit.edu/english/105.php. Students will be provided with a points list of goals that includes both basic features required to pass the course and more advanced ones that improve the final grade.

• NoPhish 2.0
• Notes 2.0

Programming usable security measures

In this subject, students develop a portion of coding, an extension, or another programming task that deals with various usable security measures, such as an extension. ZB TORPEDO (https://secuso.aifb.kit.edu/english/TORPEDO.php) or PassSec + (https://secuso.aifb.kit.edu/english/PassSecPlus.php). Students will continue to receive a score list of goals that includes both basic features required to pass the course and more advanced ones that improve graduation.

• Password Manager Enrolment Add-On
• Visualization app to explore Facebook behavioral data collection
• Portfolio Graphical Recognition-Based Passwords with Gamepads
• Implementation of an anti-phishing browser extension (English only)

Security User Studies (online studies only)

These topics are about setting up or analyzing the results of user studies of various kinds. This year, due to the Corona outbreak, we decided to conduct only online studies. Otherwise, interviews and laboratory tests would have been possible. At the end of the semester, the students present a report / a work and a lecture in which they present their results.

• Investigating user reaction to password data breaches
• Expert feedback for an anti-phishing webpage template (English only)
• Implementing Zero-Trust Authentication Schemes

Please note that registration is not required to attend the kick-off meeting.

This event counts for the KASTEL certificate. For more information on obtaining the certificate, visit the SECUSO website (https://secuso.aifb.kit.edu/Studium_und_Lehre.php).