Explore a comprehensive analysis of end users' security expectations in digital communications, focusing on journalists and lawyers. Delve into research findings on the security needs and practices of these professionals, examining the challenges they face in adopting secure communication tools. Learn about the development of a prototype encrypted email system designed to address usability issues while maintaining security. Gain insights into the differences between journalists' and lawyers' operational constraints and threat models, and understand the importance of tailoring security solutions to specific user groups. Discover how combining usable security principles with system design can lead to more effective and user-friendly secure communication tools.
Understanding and Designing for End Users' Security Expectations - Franziska Roesner - USENIX Enigma Conference - 2017
USENIX Enigma Conference via YouTube
Overview
Syllabus
Intro
Journalists can benefit from security tools...
but don't often use these tools in practice.
Interviews with Journalists
Choice of communication technology is often driven by the source - and many sources are not tech-savvy.
Long-term sources are common, with trust built over time, truly anonymous sources are rare.
Interviews with Journalistic Orgs
Journalists and organizational stakeholders share some concerns and perspectives but differ on others.
Tool Design and Prototype
Usable Encrypted Email?
Towards (More) Usable Encrypted Email
Our Tool: Confidante
Usability Study
Using Keybase for automated key management is promising: easy to use, many errors avoided.
Security concerns and usability challenges remain...
Journalists and lawyers have different operational constraints and different threat models.
Conclusion
Acknowledgements
Taught by
USENIX Enigma Conference
