Usable Security: Free On-line Course Starts 19 January

Mon, 12 Jan 2015 20:43:34 -0500
design, hci, privacy, security, usability

Usable Security

Part of the Cybersecurity Specialization »

This course focuses on how to design and build secure systems with a human-centric focus. We will look at basic principles of human-computer interaction, and apply these insights to the design of secure systems with the goal of developing security measures that respect human performance and their goals within a system.

About the Course

In many systems, human users are a critical part of the security process. They create passwords, follow security protocols, and share information that can maintain or destroy the security of a system. However, many secure systems are designed with little to no attention paid to people's cognitive abilities, workflow, or tasks. As a result, people find ways around the security obstacles that get in the way of their work.

This course focuses on how to design and build secure systems with a human-centric focus. We will look at basic principles of human-computer interaction, including the basics of humans' cognitive abilities, principles of usability, design techniques, and evaluation methods. We will then apply these insights to the design of secure systems with the goal of developing security measures that respect human performance and their goals within a system.

Through hands-on exercises designing, building, evaluating, and critiquing systems, students will learn how to integrate usability into secure software. The course will specifically focus on authentication mechanisms, browsing security, privacy and social media, and mobile security.

Course Syllabus

Syllabus

Introduction to HCI, usable security, and design

Usability

Mental and psychological models

Design methodology

Measuring and evaluating usability

Usability studies

Iterative design

Authentication

Password systems

Two-factor authentication and other alternative schemes

Biometrics

Web browsing and security

Tracking

Anonymous browsing

Secure browsing

Usability and Privacy

Personal data sharing

Privacy policies / data sharing

Personal trait Inference

Recommended Background

Sophomore/junior-level undergraduate students (and beyond)

No programming experience is required.

Course Format

Class will consist of lecture videos that average around 10 minute each. There will be quiz questions associated with each video. There will also be standalone homeworks that are not part of video lectures and a final exam.