Computer security protocols usually terminate in a computer; however, the human-based
services which they support usually terminate in a human. The gap between the human and …

In spite of the use of standard Web security measures (SSL/TLS), users enter sensitive
information such as passwords into fake Web sites. Such fake sites cause substantial …

Phishing is a model problem for illustrating usability concerns of privacy and security
because both system designers and attackers battle using user interfaces to guide (or …

As wireless networks proliferate, web browsers operate in an increasingly hostile network
environment. The HTTPS protocol has the potential to protect web users from network …

In spite of the use of standard web security measures (SSL/TLS), users often fail to
detectspoofedweb forms, and enter into them sensitive information such as passwords …

Over the last several years, popular applications such as Microsoft Internet Explorer and
Netscape Navigator have become prime targets of attacks. These applications are targeted …

Today the standard means for secure transactions in the World Wide Web (WWW) are the
SSL/TLS protocols, which provide secure (ie, private and authentic) channels between …

Unrestricted information flows are a key security weakness of current web design. Cross-site
scripting, cross-site request forgery, and other attacks typically require that information be …

In their seminal article “Why Johnny Can't Encrypt”[Whitten A, Tygar JD. Why Johnny can't
encrypt: a usability case study of PGP 5.0. In: Proceedings of the eighth USENIX security …

Client authentication has been a continuous source of problems on the Web. Although many
well-studied tech-niques exist for authentication, Web sites continue to use extremely weak …