Serial hook-ups: A comparative usability study of secure device pairing methods

DMCA

Serial hook-ups: A comparative usability study of secure device pairing methods (2009)

Cached

Download Links

by Alfred Kobsa , Ersin Uzun , Rahim Sonawalla , Yang Wang , Gene Tsudik

Venue:	In SOUPS ’09: Proceedings of the 5th
Citations:	36 - 7 self

BibTeX

@INPROCEEDINGS{Kobsa09serialhook-ups:,
    author = {Alfred Kobsa and Ersin Uzun and Rahim Sonawalla and Yang Wang and Gene Tsudik},
    title = {Serial hook-ups: A comparative usability study of secure device pairing methods},
    booktitle = {In SOUPS ’09: Proceedings of the 5th},
    year = {2009}
}

OpenURL

Abstract

Secure Device Pairing is the bootstrapping of secure communication between two previously unassociated devices over a wireless channel. The human-imperceptible nature of wireless communication, lack of any prior security context, and absence of a common trust infrastructure open the door for Man-in-the-Middle (aka Evil Twin) attacks. A number of methods have been proposed to mitigate these attacks, each requiring user assistance in authenticating information exchanged over the wireless channel via some humanperceptible auxiliary channels, e.g., visual, acoustic or tactile. In this paper, we present results of the first comprehensive and comparative study of eleven notable secure device pairing methods. Usability measures include: task performance times, ratings on System Usability Scale (SUS), task completion rates, and perceived security. Study subjects were controlled for age, gender and prior experience with device pairing. We present overall results and identify problematic methods for certain classes of users as well as methods best-suited for various device configurations. 1.

Keyphrases

comparative usability study secure device serial hook-ups wireless channel user assistance overall result wireless communication eleven notable secure device first comprehensive certain class problematic method common trust infrastructure aka evil twin comparative study unassociated device task completion rate human-imperceptible nature system usability scale prior security context present result task performance time various device configuration humanperceptible auxiliary channel study subject secure device pairing secure communication prior experience

DMCA