USABLE SECURITY AND PRIVACY

This course explores human factors in computer security and privacy, primarily through in-class activities and discussions, research readings, and a course research project. In this course, we discuss fundamental concepts in the field of Usable Security and Privacy, including why we, as computer scientists, must understand users' security and privacy perceptions, experiences, and contexts in order to design and deploy security and privacy mechanisms. We explore both classical and current-day research, covering topics like usable authentication, developers as a user group, security and privacy advice for the "general population," user perceptions of and reactions to (in)security on the web, and security and privacy for vulnerable users. Throughout our study of research topics, we also cover human-centered research methodology (and the ethical application of these methods), focusing on interviews as a methodology for the final project. Homework assignments include reading, short writing assignments, and data analysis. Students propose and complete a course project, which will be a mini research project on a usable security and privacy topic of their choice.