Program Overview

Program Overview

The Practtical Course Usable Security is a master's level course that focuses on designing systems for security-critical contexts that are both secure and usable. The course consists of two parts: a theoretical part that introduces participants to different topics of usable security and privacy, and a practical part that focuses on user-centered design techniques for creating novel privacy and security mechanisms.

Course Details

• Lecturer: Prof. Alt
• Persons in Charge: Lukas Mecke, Sarah Prange
• Hours per week: 4
• ECTS credits: 6 (MSc)
• Module: Master P5.0.2 or P5.0.4: Gruppenpraktikum zu fortgeschrittenen Themen der Informatik I or Informatik II
• Possible Recognition: Also possible for P2, P3, or P6 (Vertiefende Themen f僡 Master) after consultation with the examination committee

Time and Location

• Time: Tuesday, 2pm - 4:15pm (s.t.!)
• Start: 18.04.2023
• Location: Research Institute CODE, Carl-Wery-Stra絽 18, Room 0812

Course Objectives

The objective of this course is to learn how systems can be designed for security-critical contexts that are both secure and usable at the same time. This year, the course will evolve around tangibles and wearables.

Course Structure

The course is divided into two main parts:

1. Theoretical Part: Participants will be introduced to different topics of usable security and privacy, including an overview of security and privacy mechanisms, threat modeling, and mental models. This part will also cover different application areas, such as passwords, authentication, security warnings, and social engineering.
2. Practical Part: Participants will focus on user-centered design techniques that allow for creating novel privacy and security mechanisms. In small groups, participants will initially create concepts for novel mechanisms, then build prototypes, and finally evaluate these in user studies regarding security and usability.

Schedule

The course schedule is as follows: | Date | Task | Submission | | --- | --- | --- | | 18.04.2023 | Introduction & Research Examples | | | 02.05.2023 | (individual) Concept Pitches (60 seconds) => form teams | | | 09.05.2023 | | | | 16.05.2023 | Concept Presentations (in Teams) | | | 23.05.2023 | | | | 30.05.2023 | | | | 06.06.2023 | | | | 13.06.2023 | Intermediate Presentations | | | 20.06.2023 | | | | 27.06.2023 | | | | TBA | Final Presentations | | | 06.08.2023 | | Written Report |

Application Requirements

Students interested in the course should provide the following information:

• Rate (1=no experience, 5=expert) and briefly describe any relevant expertise in the following areas: hardware prototyping, Android development, security/privacy, concept development, evaluation
• A short paragraph (max. 150 words) describing motivation to participate in this course

Additional Information

This is a joint course with the Research Institute CODE of UniBW Munich.