48 citations · 117 across the 10 of their papers we have counts for
11 papers
"Setting up TLS authentication was hell": A Usability Study of Client Certificate Authentication
Abubakar Sadiq Shittu, Clay Shubert, John Sadik +1
"Cryptography turns a security problem into a key management problem." Despite decades of research effort towards usable key management, it remains unclear whether key management i…
Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers
Anuj Gautam, Tarun Yadav, Garrett Smith +2
Password managers provide significant security benefits to users. However, malicious client-side scripts and browser extensions can steal passwords after the manager has autofilled…
The Emperor's New Autofill Framework: A Security Analysis of Autofill on iOS and Android
Sean Oesch, Anuj Gautam, Scott Ruoti
Password managers help users more effectively manage their passwords, encouraging them to adopt stronger passwords across their many accounts. In contrast to desktop systems where…
SoK: Securing Email -- A Stakeholder-Based Analysis (Extended Version)
Jeremy Clark, P. C. van Oorschot, Scott Ruoti +2
While email is the most ubiquitous and interoperable form of online communication today, it was not conceived with strong security guarantees, and the ensuing security enhancements…
TrustBase: An Architecture to Repair and Strengthen Certificate-based Authentication
Mark O'Neill, Scott Heidbrink, Jordan Whitehead +4
We describe TrustBase, an architecture that provides certificate-based authentication as an operating system service. TrustBase enforces best practices for certificate validation f…
MessageGuard: A Browser-based Platform for Usable, Content-Based Encryption Research
Scott Ruoti, Jeff Andersen, Tyler Monson +2
This paper describes MessageGuard, a browser-based platform for research into usable content-based encryption. MessageGuard is designed to enable collaboration between security and…
Why Johnny Still, Still Can't Encrypt: Evaluating the Usability of a Modern PGP Client
Scott Ruoti, Jeff Andersen, Daniel Zappala +1
This paper presents the results of a laboratory study involving Mailvelope, a modern PGP client that integrates tightly with existing webmail providers. In our study, we brought in…
"We're on the Same Page": A Usability Study of Secure Email Using Pairs of Novice Users
Scott Ruoti, Jeff Andersen, Scott Heidbrink +5
Secure email is increasingly being touted as usable by novice users, with a push for adoption based on recent concerns about government surveillance. To determine whether secure em…
Private Webmail 2.0: Simple and Easy-to-Use Secure Email
Scott Ruoti, Jeff Andersen, Travis Hendershot +2
Private Webmail 2.0 (Pwm 2.0) improves upon the current state of the art by increasing the usability and practical security of secure email for ordinary users. More users are able…
User Attitudes Toward the Inspection of Encrypted Traffic
Scott Ruoti, Mark O'Neil, Daniel Zappala +1
This paper reports the results of a survey of 1,976 individuals regarding their opinions on TLS inspection, a controversial technique that can be used for both benevolent and malic…
TLS Proxies: Friend or Foe?
Mark O'Neill, Scott Ruoti, Kent Seamons +1
The use of TLS proxies to intercept encrypted traffic is controversial since the same mechanism can be used for both benevolent purposes, such as protecting against malware, and fo…