Designing user studies for security applications: a case study with wireless network configuration. (24th February 2009)

• Record Type: Journal Article
• Authors: Kuo, Cynthia; Perrig, Adrian; Walker, Jesse
• Is Part Of: International journal of security and networks. Volume 4:Number 1/2(2009)
• Page Start: 101
• Page End: 109
• Publication Date: 2009-02-24
• Subjects: user studies -- security applications -- case study -- wireless networks -- network configuration -- evaluation; Computer networks -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1747-8405

Abstract

Spontaneous interactions between end users and devices are generally secured by human actions. Evaluating whether end users are able to perform these actions correctly can be challenging. Basic, textbook-style user study methods make assumptions that may not hold for security applications. In this piece, we outline five major user study assumptions. Using 802.11 network configuration as a case study, we also show how to adapt existing user study methods for evaluating security applications. We model how security experts might approach the configuration of their own home networks. Next, we combine several methods to design a study that pinpoints where end users encounter difficulties during configuration. Finally, we discuss the findings from our user study.