CHI -- Security Papers

posted by  kevyn (54)  16 months ago (radio.weblogs.com)

I'm in the CHI papers session on Security.

The first paper is "Why phishing works."  Interesting point: both security designers and phishers use user interface techniques to accomplish their goals. Three basic categories of reasons why phishing works:

• lack of knowledge ( e.g. about URLs, security indicators)
  
• visual deception (e.g. "vv" istead of "w", overlaying windows,embedding fake address and status bar in page )
  
• bounded atention (i.e. inattention to secuirty indicators) 

In their study of whether people can correctly identify re