Event

• Usable Security: History, Themes, and Challenges (Synthesis Lectures on Information Security, Privacy, and Trust): Simson Garfinkel und Heather Richter Lipford. 2014
• Security and Usability: Designing Secure Systems that People Can Use von Lorrie Faith Cranor und Simson Garfinkel. 2005
• Melanie Volkamer, Karen Renaud: Mental Models - General Introduction and Review of Their Application to Human-Centred Security. In Number Theory and Cryptography (2013): 255-280: https://link.springer.com/chapter/10.1007/978-3-642-42001-6_18
• Paul Gerber, Marco Ghiglierie, Birgit Henhapl, Oksana Kulyk, Karola Marky, Peter Mayer, Benjamin Reinheimer, Melanie Volkamer: Human Factors in Security. In: Reuter C. (eds) Sicherheitskritische Mensch-Computer-Interaktion. Springer (2018)  https://link.springer.com/chapter/10.1007/978-3-658-19523-6_5
• Bruce Schneier: Psychology of Security (2018): https://www.schneier.com/essays/archives/2008/01/the_psychology_of_se.html
• Ross Anderson: security /usability and psychology. In Security Engineering. http://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c02.pdf
• Andrew Odlyzko: Economics, Psychology and Sociology of Security: http://www.dtc.umn.edu/~odlyzko/doc/econ.psych.security.pdf

Bitte schauen Sie bereits alle bereit gestellten Informationen vor der ersten Veranstaltung an (z.B. erste Foliensatz)!

Die Veranstaltung wird mit 3G durchgeführt. Dementsprechend ist entweder ein einmaliger Impfnachweis oder zu jeder Veranstaltung ein offizieller Nachweis eines negativen Tests erforderlich.

Manche Vorlesungseinheiten werden auf Deutsch, andere auf Englisch gehalten. 

Um an den Quiz zu Begin der Veranstaltung teilzunehmen wird geladenes ein Gerät benötigt z.B. Laptop oder Handy.

To successfully pass the course, the following requirements must be met:

Both need to be done:

• Reading Paper, Active Participation & Pass Quiz on Paper for Graphical Passwords
• Presentation of Results Exercise 2

+ 9 of the following 11 need to be done:

• Submit ILIAS certificate until Oct 24
• Pass Quiz on InfoSec Lecture
• Active participation exercise 1 – Part 1
• Reading Paper, Active Participation & Pass Quiz “Users are not the enemy”Active participation exercise 1 – Part 2
• Reading Paper, Active Participation & Pass Quiz “Why Johnny can't encrypt”
• Reading Paper, Active Participation & Pass Quiz “Put Your Warning Where Your Link Is: Improving and Evaluating Email Phishing Warnings”
• Active participation exercise 1 – Part 3
• Active participation exercise 1 – Part 4 Results
• Reading Paper, Active Participation & Pass Quiz “User-centered security”Active participation exercise 2 – Part 1

Here is a first preview of the topics planned for the lecture:

1. General Introduction
2. Self-Study: Knowlege of Information Security Lecture
3. Terminology + Basics
4. Evaluation and analyses methods
5. Risk Communication
6. Security Awareness
7. Security Indicators
8. Graphical Authentication
9. Shoulder Surfing Authentication
10. Usable Verifiable Electronic Voting
11. Q&A + Exam preparation