An Investigation into the “Beautification” of Security Ceremonies

Giampaolo Bella; Karen Renaud; Diego Sempreboni; Luca Vigano

An Investigation into the “Beautification” of Security Ceremonies

Giampaolo Bella, Karen Renaud, Diego Sempreboni, Luca Vigano

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

94 Downloads (Pure)

Abstract

“Beautiful Security” is a paradigm that requires security ceremonies to contribute to the ‘beauty’ of a user experience. The underlying assumption is that people are likely to be willing to engage with more beautiful security ceremonies. It is hoped that such ceremonies will minimise human deviations from the prescribed interaction, and that security will be improved as a consequence. In this paper, we explain how we went about deriving beautification principles, and how we tested the efficacy of these by applying them to specific security ceremonies. As a first step, we deployed a crowd-sourced platform, using both explicit and metaphorical questions, to extract general aspects associated with the perception of the beauty of real-world security mechanisms. This resulted in the identification of four beautification design guidelines. We used these to beautify the following existing security ceremonies: Italian voting, user-to-laptop authentication, password setup and EU premises access. To test the efficacy of our guidelines, we again leveraged crowd-sourcing to determine whether our “beautified” ceremonies were indeed perceived to be more beautiful than the original ones. The results of this initial foray into the beautification of security ceremonies delivered promising results, but must be interpreted carefully.

Original language	English
Title of host publication	SECRYPT 2019
Publication status	Accepted/In press - 6 May 2019

Access to Document

An Investigation into the “Beautification”_BELLA_Accepted6May2019_GREEN AAMAccepted author manuscript, 2.4 MB

Cite this

@inbook{88a7ab39f8684de7850761716c43091c,

title = "An Investigation into the “Beautification” of Security Ceremonies",

abstract = "“Beautiful Security” is a paradigm that requires security ceremonies to contribute to the {\textquoteleft}beauty{\textquoteright} of a user experience. The underlying assumption is that people are likely to be willing to engage with more beautiful security ceremonies. It is hoped that such ceremonies will minimise human deviations from the prescribed interaction, and that security will be improved as a consequence. In this paper, we explain how we went about deriving beautification principles, and how we tested the efficacy of these by applying them to specific security ceremonies. As a first step, we deployed a crowd-sourced platform, using both explicit and metaphorical questions, to extract general aspects associated with the perception of the beauty of real-world security mechanisms. This resulted in the identification of four beautification design guidelines. We used these to beautify the following existing security ceremonies: Italian voting, user-to-laptop authentication, password setup and EU premises access. To test the efficacy of our guidelines, we again leveraged crowd-sourcing to determine whether our “beautified” ceremonies were indeed perceived to be more beautiful than the original ones. The results of this initial foray into the beautification of security ceremonies delivered promising results, but must be interpreted carefully.",

author = "Giampaolo Bella and Karen Renaud and Diego Sempreboni and Luca Vigano",

year = "2019",

month = may,

day = "6",

language = "English",

booktitle = "SECRYPT 2019",

}

TY - CHAP

T1 - An Investigation into the “Beautification” of Security Ceremonies

AU - Bella, Giampaolo

AU - Renaud, Karen

AU - Sempreboni, Diego

AU - Vigano, Luca

PY - 2019/5/6

Y1 - 2019/5/6

N2 - “Beautiful Security” is a paradigm that requires security ceremonies to contribute to the ‘beauty’ of a user experience. The underlying assumption is that people are likely to be willing to engage with more beautiful security ceremonies. It is hoped that such ceremonies will minimise human deviations from the prescribed interaction, and that security will be improved as a consequence. In this paper, we explain how we went about deriving beautification principles, and how we tested the efficacy of these by applying them to specific security ceremonies. As a first step, we deployed a crowd-sourced platform, using both explicit and metaphorical questions, to extract general aspects associated with the perception of the beauty of real-world security mechanisms. This resulted in the identification of four beautification design guidelines. We used these to beautify the following existing security ceremonies: Italian voting, user-to-laptop authentication, password setup and EU premises access. To test the efficacy of our guidelines, we again leveraged crowd-sourcing to determine whether our “beautified” ceremonies were indeed perceived to be more beautiful than the original ones. The results of this initial foray into the beautification of security ceremonies delivered promising results, but must be interpreted carefully.

AB - “Beautiful Security” is a paradigm that requires security ceremonies to contribute to the ‘beauty’ of a user experience. The underlying assumption is that people are likely to be willing to engage with more beautiful security ceremonies. It is hoped that such ceremonies will minimise human deviations from the prescribed interaction, and that security will be improved as a consequence. In this paper, we explain how we went about deriving beautification principles, and how we tested the efficacy of these by applying them to specific security ceremonies. As a first step, we deployed a crowd-sourced platform, using both explicit and metaphorical questions, to extract general aspects associated with the perception of the beauty of real-world security mechanisms. This resulted in the identification of four beautification design guidelines. We used these to beautify the following existing security ceremonies: Italian voting, user-to-laptop authentication, password setup and EU premises access. To test the efficacy of our guidelines, we again leveraged crowd-sourcing to determine whether our “beautified” ceremonies were indeed perceived to be more beautiful than the original ones. The results of this initial foray into the beautification of security ceremonies delivered promising results, but must be interpreted carefully.

UR - http://www.secrypt.icete.org/Home.aspx

M3 - Conference paper

BT - SECRYPT 2019

ER -

An Investigation into the “Beautification” of Security Ceremonies

Abstract

Access to Document

Other files and links

Fingerprint

Cite this