Cyberspace of Shujun LI >> Usable Security and Privacy



Usable Security/HCI in General: NIST Visualization and Usability Group (NIST Usability and Security, Biometrics and Usability, Industry Usability Reporting/Standards, Industry USability Reporting (IUSR) Project) Usability Net BCS Usability News emotion icon Richard Conlan's Blog on Usable Security emotion icon HCISec Bibliography SOUPS - Symposium On Usable Privacy and Security Soups-announce -- Announcements related to the Symposium On Usable Privacy and Security (SOUPS) emotion icon HCI Bibliography User Experience Professionals Association (UXPA) (Usability Body of Knowledge; Journal of Usability Studies (JUS); UK Chapter of the User Experience Professionals' Association) Interaction Design Foundation Human-Computer Interaction Resource Network Human-Centered Computing Education Digital Library

Human Cognitive Architectures and Models: ACT-R (ACT-R users primary mailing list) jACT-R CCMSuite (Python ACT-R) Soar OpenCog Google DeepMind emotion icon CogTool (@github; CogTool-Explorer) Cogulator Apex (Documentation Wiki) SANLab-CM (Old Project Page) emotion icon AutoCWW2
Eye-Tracking: Tobii SensoMotoric Instruments (SMI) Pupil Labs Visual Interaction (myGaze) Smart Eye Interactive Minds Gazepoint

User Authentication and Identity Management

General: Research Papers on Password-based Cryptography Xato - Passwords & Security emotion icon FIDO (Fast IDentity Online) Alliance OATH - Initiative for Open Authentication OpenID Foundation OAuth Central Authentication Service (CAS) emotion icon Deidentification@NIST.GOV

Password Checkers, Meters, Crackers and Analyzers: Pwned Passwords @ SecLists (Passwords) Skull Security Wiki (Passwords) Yahoo Password Frequency Corpus emotion icon PARS (Password Analysis and Research System) Password Hashing Competition Password Multi-Checker Tool @ Concordia emotion icon zxcvbn (Dropbox's Password Meter) CMU-CUPS-CHI2017 data-driven password meter (@github) passwdqc Google Password Strength API The Password Meter ( Oracle Password Checker Javascript Password Strength Meter Password Checker @ My1Login Kaspersky Password Checker Password Checker @ emotion icon hashcat HashView Hashcat GUI John the Ripper password cracker ophcrack OMEN (Ordered Markov ENumerator) RainbowCrack THC-Hydra Cain & Abel Medusa Parallel Network Login Auditor fgdump L0phtCrack Phraser emotion icon The Sprawl (PACK - Password Analysis and Cracking Toolkit, automatic password rule analysis and generation) AccessData Password Recovery Toolkit® (PRTK®) Pipal (Password Analyser) (@Github) Passpal
Password Management and Generation: Password Safe KeePass LastPass RoboForm Clipperz (@Github) emotion icon PasswordMaker pa55 Passphrase Generator @

User Authentication: Graphical User Authentication emotion icon fastword Blue Moon Authentication True Key AGSES Group (myAGSES Services) Giesecke & Devrient GmbH SecuTech KOBIL Systems (mIDentity Series; Card Readers, IDToken; SecOPTIC, SecoVID; AST - Application Security Technology) VASCO Data Security International, Inc. (Cronto) PassWindow SyferLock (Grid2Form™, GridSoftToken™, GridAdvanced™) Device Authority Yubico Usable Security Systems Session Juggler BlueProximity emotion icon How unique are your usernames?

Identity Management: National Strategy for Trusted Identities in Cyberspace (NSTIC) emotion icon OASIS Identity and Trusted Infrastructure (IDtrust) Member Section W3C WebID Kantara Initiative (Liberty Alliance) Identity Commons Internet Identity Workshop (IIW) emotion icon OneID Windows CardSpace LID - Light-Weight Identity Yadis Ping Identity Corporation Janrain User Management Platform Identity Woman

Mobile Security and Privacy: TaintDroid AntiTaintDroid (ScrubDroid) DroidBox Android-Application-SandBox (AASandbox) Mobile-Sandbox Agrigento emotion icon SuSi – Sources and Sinks (@GitHub) Android-specific components of FlowDroid DroidForce DroidSafe AppAudit: Uncover Hidden Data Leaks in Apps (@GitHub) AppGuardian Device Analyzer ScanDal: Static Analyzer for Detecting Privacy Leaks in Android Applications Intent Fuzzer MindMac's IntentFuzzer LinkDroid (@Github) emotion icon DroidBench Stanford SecuriBench (Stanford SecuriBench Micro) emotion icon UI/Application Exerciser Monkey monkeyrunner droidRunner Dare: Dalvik Retargeting PATDroid (A Program Analysis Toolkit for Android) Androguard APKinspector Apktool Dedexer Soot DECAF (Dynamic Executable Code Analysis Framework) + DroidScope Simplify: Generic Android Deobfuscator PlayDrone: A Measurement Study of Google Play ProGuard DexGuard XSI-Android Purple Robot emotion icon CopperDroid EdgeMiner Tracedroid Dexter SandDroid @ XJTU Akana - Android App Interactive Analysis Enviroment (Eacus) NowSecure, Inc Lookout, Inc. VERACODE's Mobile Application Security solution VisualThreat Joe Sandbox Mobile Android Malware Genome Project emotion icon PrivMetrics PrivacyGrade: Grading The Privacy Of Smartphone Apps emotion icon PlayDrone (@Github,

Human vs. Security

Human Computation: Human Computation Institute AAAI Conference on Human Computation and Crowdsourcing (HCOMP) Crowdsourcing and Human Computation @ Google Groups Journal of Artificial Intelligence Research's Special Track on Human Computation and AI
Human Interactive Proofs (HIPs) and Visual Analytics for Security: HIPs @ Aladdin.CMU emotion icon CAPTCHA VizSec (IEEE Symposium on Visualization for Cyber Security) SecVis - Security Visualization (The DAVIX Live CD) Visualisation work @ TREsPASS project emotion icon SecHCI GATE (Graphic Access Tabular Entry) SEa AUF Image Project

Social Engineering: Anti-Phishing Working Group 中国反钓鱼网站联盟 Anti-Phishing Alliance of China (APAC) PhishTank Jose Nazario's Phishing Corpus (Nov 2004 - June 2005) Google Safe Browsing API (Protocolv2Spec: Client specification for the Google Safe Browsing v2.2 protocol) Report Suspected Phishing Sites to Symantec UAB PhishIQ™ Tool FraudWatch International Pty Ltd. Phishing and Pharming Information Site AA419 (Artists Against 419) emotion icon Identity Theft Surveys and Studies @ Privacy Rights Clearinghouse Identity Theft @ Federal Trade Commission (US) Identity Theft Resource Center Putting an End to Account-Hijacking Identity Theft @ FDIC (US) Financial Fraud Action UK emotion icon RSA Online Fraud Resource Center Cisco IronPort Phishing Overview MarkMonitor AntiFraud Websense (Security Labs, Attack Information Center) Trustwave Holdings, Inc. (SpiderLabs) Phishing Security Info @ Panda Security Wombat Security Technologies Javelin Strategy & Research (Security, Risk & Fraud) PhishLabs PhishMe Phishnix emotion icon Web Password Hashing (PwdHash) SpoofGuard Stanford SafeCache Stanford SafeHistory SpyBlock Netcraft Anti-Phishing Toolbar (Netcraft Phishing Site Feed)

Privacy, Anonymity and Internet Censorship

Projects, Campaigns and Working Groups: Privacy By Design (PbD) emotion icon W3C Privacy Page (P3P: The Platform for Privacy Preferences) IETF Geographic Location/Privacy Working Group MozPETs: Mozilla Privacy Enhancement Technologies Free Heaven Project (Anonymity Bibliography) Usable Privacy Policy Project
Organizations and Networks: Electronic Frontier Foundation (EFF) Electronic Privacy Information Center (EPIC) (, Online Guide to Practical Privacy Tools) International Association of Privacy Professionals (IAPP) Privacy International Global Privacy Enforcement Network (GPEN) OECD Working Party on Information Security and Privacy (WPISP) Future of Privacy Forum (FPF) Privacy Rights Clearinghouse (PRC) Kantara Initiative Center for Democracy and Technology (CDT) Cookie Clearinghouse The Economics of Privacy Consumers Against Supermarket Privacy Invasion and Numbering (CASPIAN) Pandab TRUSTe German BigBrotherAwards

Privacy Enhancing Technologies and Products: Onoin Routing Tor Vidalia Talis (The Amnestic Incognito Live System) GNUnet Psiphon Ultrasurf Freegate emotion icon U.S.-EU & U.S.-Swiss Safe Harbor Frameworks ( U.S.-EU Safe Harbor List, U.S.-Swiss Safe Harbor List) Do Not Track All About Do Not Track (DNT) Mobile Location Analytics Opt Out NAI (Network Advertising Initiative) Opt-out Tool Digital Advertising Alliance (DAA)Consumer Opt Out Page TRUSTe Preference Manager Google Ads Settings Microsoft Personalized Ad Preferences Yahoo! Ad Interest Manager BlueKai (Oracle) Consumers Opt-Out Page emotion icon Mozilla Lightbeam for Firefox AVG PrivacyFix Abine, Inc (DoNotTrackMe, DeleteMe, MaskMe) Princeton Web Transparency & Accountability Project (WebTAP) Ghostery, Inc. EFF's Privacy Badger Privacy Bird® PrivySeal Panopticlick - How Unique is Your Web Browser? IBM Anonymization (EDDI) Library emotion icon International Workshop on Genome Privacy and Security iDASH Privacy & security workshop

Internet Censorship and Control: Collections of Peer-Reviewed Papers on Internet Censorship and Control emotion icon Internet Governance Forum (IGF) Global Network Initiative Citizen Lab Berkman Center for Internet & Society at Harvard University Internet & Democracy Project OpenNet Initiative (ONI) Freedom House (Global Internet Freedom Program) Reporters Without Borders (RWB)/Reporters Sans Frontières (RSF) (Internet Freedom; The Enemies of Internet) Golden Shield Project @ Wikipedia emotion icon Chinese Firewall Test @

Research Groups and Researchers

Research Institutes, Centers, Labs, Groups & Projects: The Research Institute in Science of Cyber Security (RISCS) Human Experience and Design Group, Microsoft Research Cambridge UCL Information Security Research Group (UCL Academic Centre of Excellence for Cyber Security Research) UCL Jill Dando Institute of Security and Crime Science UCL SECReT (Security Science) Doctoral Research Training Centre Security Group @ Cambridge Computer Laboratory UCL Interaction Centre (UCLIC) Human-Centred Systems Research Group @ UCL Human-Computer Interaction Centre @ University of Birmingham PaCT Lab (Psychology and Communication Technology), University of Northumbria emotion icon CMU Human-Computer Interaction Institute (HCII) (CHIMPS (Computer Human Interaction: Mobility Privacy Security) Lab) CMU CyLab CMU CyLab Usable Privacy and Security Laboratory (CUPS) CMU CyLab Mobility Research Center (MRC) CMU Quality of Life Technology Center (QoLT) Carleton Computer Security Lab HotSoft: Software as Interactive Media Security - Usability - Society research group - SECUSO @ TY-Darmstadt emotion icon IT Security for Citizens (ITSCI) The Behavioural Insights Team Geneva Centre for Security Policy (GCSP)

Researchers: Hassan Jameel Asghar Karen Renaud emotion icon Ding Wang Martina Angela Sasse Joseph Maguire Ross Anderson Steven J. Murdoch Gianluca Stringhini Frank Stajano Markus Kuhn Richard Clayton Mike Bond Jeff Yan Mike Just David Aspinall Ron Poet Lynne Coventry Patrick Olivier Paul Dunphy Gianluca Demartini emotion icon Melanie Volkamer Volker Roth Bernd Borchert emotion icon Lorrie Faith Cranor Paul C. Van Oorschot Robert Lewis Biddle Sonia Chiasson Julie Thorpe Luis von Ahn Manuel Blum Dr. Nicholas J. Hopper Tsutomu Matsumoto (松本勉) John Langford Dinei Florencio Cormac Herley Elie Bursztein Bin Zhu Susan Wiedenbeck Michael Reiter Fabian Monrose Antonella De Angeli Markus Jakobsson Jason I. Hong (洪宜安) Adrian Perrig David Wagner Jean-Camille Birget Nasir Memon Nicolas Christin Eiji Hayashi Doug Tygar Tyler Moore Stefan Savage Andrew Patrick Rachna Dhamija Alexander De Luca Lujo Bauer Dawei Hong John C. Mitchell Engin Kirda Christopher Kruegel Sven Dietrich Alain Forget Elizabeth Stobert Serge Egelman Adam Bender Matthieu Martin Nitesh Saxena Paul Watters Yang Wang Steve Sheng Patrick Gage Kelley Joy Ying Zhang Robert W. Reeder Alessandro Acquisti Julie Downs Andrej Bauer (random art) Tetsuji Takada Lynne Coventry Linda Little emotion icon Simson Garfinkel Avi Rubin Eran Toch James C. Hoe Daniel P. Siewiorek Norman Sadeh Priya Narasimhan Virgil D. Gligor Ragunathan "Raj" Rajkumar Greg Ganger Martin Griss Anind K. Dey Fred Stutzman Pei Zhang Jonathan M. McCune Daphna Weinshall Sungyoung Lee Heejo Lee

Only one revision exists, which was created (or modified) by hooklee at Wednesday, October 11, 2017 1:56:12 PM.
This page was locked and can only be edited by administrators.

HomeIndexRecent ChangesPreference

Valid XHTML 1.0 Transitional


Germany (CET)