Skip to Main content Skip to Navigation
Conference papers

A Generic Multimodels-Based Approach for the Analysis of Usability and Security of Authentication Mechanisms

Nicolas Broders 1 Célia Martinie 1 Philippe Palanque 1 Marco Winckler 2, 3 Kimmo Halunen 4
1 IRIT-ICS - Interactive Critical Systems
IRIT - Institut de recherche en informatique de Toulouse
3 WIMMICS - Web-Instrumented Man-Machine Interactions, Communities and Semantics
CRISAM - Inria Sophia Antipolis - Méditerranée , Laboratoire I3S - SPARKS - Scalable and Pervasive softwARe and Knowledge Systems
Abstract : Authentication is a security function, added on top of an interactive system, whose role is to reduce organizations and users’ risks to grant access to sensitive data or critical resources to unauthorized users. Such a security function interfere with users’ goals and tasks by adding articulatory activities, which affect each dimension of usability. In order to mitigate their negative effect on usability, security functions must be designed following a User Centered Approach. In order to ensure their efficiency in terms of security, security processes have to be followed. With this respect, this paper focuses on the representation of user tasks (using task modelling techniques) to be performed during authentication. For security aspects, we propose the use of an approach called “attack trees” which represents threats and their effect. To integrate both aspects in a single framework, we propose an extended task modelling technique that is able to represent explicitly security threats and their potential effect together with users’ tasks performed during authentication. We show how such models can be used to compare the usability and the security of different authentication mechanisms and to make explicit conflicts between these properties. We exemplify the use of the approach on two sophisticated authentication mechanisms demonstrating its applicability and its usefulness for representing and assessing in a single framework, usability and security of these security mechanism.
Document type :
Conference papers
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-03079818
Contributor : Célia Martinie Connect in order to contact the contributor
Submitted on : Thursday, December 17, 2020 - 3:50:11 PM
Last modification on : Wednesday, November 3, 2021 - 6:52:49 AM
Long-term archiving on: : Thursday, March 18, 2021 - 8:13:28 PM

File

A Generic Multimodels-Based Ap...
Files produced by the author(s)

Identifiers

Citation

Nicolas Broders, Célia Martinie, Philippe Palanque, Marco Winckler, Kimmo Halunen. A Generic Multimodels-Based Approach for the Analysis of Usability and Security of Authentication Mechanisms. HCSE 2020 - 8th International Conference on Human-Centered Software Engineering - IFIP WG 13.2 International Working Conference, Nov 2020, Eindhoven/ Online, Netherlands. pp.61-83, ⟨10.1007/978-3-030-64266-2_4⟩. ⟨hal-03079818⟩

Share

Metrics

Record views

133

Files downloads

214