@inproceedings{756ad78acf214ed8a3c83461e9bf9cff,
title = "Models-Based Analysis of Both User and Attacker Tasks: Application to EEVEHAC",
abstract = "The design and development of security mechanisms, such as authentication, requires analysis techniques that take into account usability along with security. Although techniques that are grounded in the security domain target the identification and mitigation of possible threats, user centered design approaches have been proposed in order to also take into account the user{\textquoteright}s perspective and needs. Approaches dealing with both usability and security focus on the extent to which the user can perform the authentication tasks, as well as on the possible types of attacks that may occur and the potential threats on user tasks. However, to some extent, attacker can be considered as user of the system (even if undesirable), and the analysis of attacker tasks provides useful information for the design and development of an authentication mechanism. We propose a models-based approach to analyse both user and attacker tasks. The modeling of attacker tasks enables to go deeper when analysing the threats on an authentication mechanism and the trade-offs between usability and security. We present the results of the application of this models-based approach to the EEVEHAC security mechanism, which enables the setup of a secure communication channel for users of shared public computers.",
keywords = "Human understandable cryptography, Task modeling, Usable security, Visual channel",
author = "Sara Nikula and C{\'e}lia Martinie and Philippe Palanque and Julius Hekkala and Outi-Marja Latvala and Kimmo Halunen",
year = "2022",
month = aug,
day = "16",
doi = "10.1007/978-3-031-14785-2_5",
language = "English",
isbn = "978-3-031-14784-5",
series = "Lecture Notes in Computer Science",
publisher = "Springer",
pages = "70--89",
editor = "Regina Bernhaupt and Carmelo Ardito and Stefan Sauer",
booktitle = "Human-Centered Software Engineering - 9th IFIP WG 13.2 International Working Conference, HCSE 2022",
address = "Germany",
note = "9th IFIP WG 13.2 International Working Conference, HCSE 2022 ; Conference date: 24-08-2022 Through 26-08-2022",
}