Keynote Lectures
Usable Security: Security 'Warnings' 2.0
Melanie Volkamer, Karlsruhe Institute of Technology, Germany
Cybersecurity, Nicolas Cage and Peppa Pig
Luca Viganò, Department of Informatics, King's College London, United Kingdom
Usable Security: Security 'Warnings' 2.0
Melanie Volkamer
Karlsruhe Institute of Technology
Germany
Brief Bio
Prof. Dr. Melanie Volkamer is a full professor at KIT in the Department of Economics and Management. She leads the SECUSO research group. From August 2016 until March 2018 she was a Professor (Kooperationsprofessur) at the Department of Computer Science of Technische Universität Darmstadt Germany). From December 2015 until December 2018, she has been appointed Full Professor for Usable Privacy and Security at Karlstad University (Sweden). Before she was an Assistant Professor at TU Darmstadt. Prof. Volkamer has been heading the research group "SECUSO - Security, Usability and Society" since 2011. Her research focus is on human factors in security and privacy which includes topics such as security awareness & training as well as usable security & privacy.
Abstract
Human Centered Security by Design is the key principle when developing any security solution - be it a security awareness solution or any application connected to the Internet. To be usable, i.e. in particular effective in protecting users from cyber attacks, the solutions need to be aligned with users' mental models. Therefore it is important to develop any security solution in an iterative approach together with future users. The focus of this talk is on security interventions (often called security warnings). Most of today's applications are connected to the Internet and have a user interface to also communicate with users about (potentially) risky situations or actions. These user interfaces are called security interventions. In this talk, issues with existing security interventions are discussed - as well as a framework to address these shortcomings in future security interventions is proposed and discussed.
Cybersecurity, Nicolas Cage and Peppa Pig
Luca Viganò
Department of Informatics, King's College London
United Kingdom
www.lucavigano.com
Brief Bio
Luca Viganò is Professor at the Department of Informatics of King's College London, UK, where he heads the Cybersecurity Group. His research focuses on formal methods and tools for the specification, verification and testing of cybersecurity and privacy. He is particularly interested in formal analysis of socio-technical systems, whose security depends intrinsically on human users, and of cyber-physical systems, where one needs to explicitly consider the underlying physical processes. He also works on explainable cybersecurity, where, in addition to more formal approaches, he has been investigating how different kinds of artworks can be used to explain cybersecurity and how telling (i.e., explaining notions in a formal, technical way) can be paired with showing through visual storytelling or other forms of storytelling. He is Global Envoy for King’s College London and Vice Dean (Enterprise & Engagement) of the Faculty of Natural, Mathematical & Engineering Sciences.
Abstract
“Show, don’t tell” has become the literary commandment for any writer. It applies to all forms of fiction, and to non-fiction, including scientific writing, where it lies at the heart of many scientific communication and storytelling approaches. In this talk, I will discuss how “show and tell” is actually often the best approach when one wants to present, teach or explain complicated ideas such as those underlying notions and results in mathematics and science, and in particular in cybersecurity. I will discuss how different kinds of artworks can be used to explain cybersecurity and I illustrate how telling (i.e., explaining notions in a formal, technical way) can be paired with showing through visual storytelling or other forms of storytelling. I will also discuss four categories of artworks and the explanations they help provide. As concrete examples, I will focus on 15 films starring Nicolas Cage which directly revolve around cybersecurity or can be used to explain cybersecurity notions in such a way that they can be understood by non-experts. This talk covers research that I have described in my three papers "Explaining Cybersecurity Using Films and the Arts”, "Don’t Tell Me The Cybersecurity Moon Is Shining… (Cybersecurity Show and Tell)” and "Nicolas Cage is the Center of the Cybersecurity Universe”. I will also present some results that are still unpublished about experiments that we have carried out to understand the quantitative and qualitative impact of films and other popular artworks.