Event

The internship "Security, Usability and Society" will cover topics both of usable security and privacy programming, and how to conduct user studies. This internship will be only in English. The kick-off, the presentations, and every written material to be graded must be in English. Communications with supervisors can be in German.

Important dates:

Kick-off: April 24th, 2020, 14: 00-15: 30 Microsoft Teams - please check the WiWi portal

Final submission : 8. September 2020, 23:59

Presentation : 28. September 2020, 14:00

Subjects:

Privacy-friendly apps

In this subject, students complete an app (or an extension of an app) among our Privacy-Friendly Apps. Please click the following link to know more about them:  https://secuso.aifb.kit.edu/english/105.php . Students are provided with a point list of goals, containing both basic features mandatory to pass the course and more advanced ones that heighten the final grade.

Topics:

• NoPhish 2.0
• Notes 2.0
• Sudoku 2.0

Programming Usable Security Intervention

In this subject, students develop a part of coding, an extension, or another programming task dealing with various usable security interventions, eg as an extension. Eg TORPEDO (  https://secuso.aifb.kit.edu/english/TORPEDO.php  ) or PassSec + (  https://secuso.aifb.kit.edu/english/PassSecPlus.php  ). Just as before, students are provided with a point list of goals, containing both basic features mandatory to pass the course and more advanced ones that heighten the final grade.

Topics:

• Password Manager Enrollment Add-On
• Portfolio Graphical Recognition-Based Passwords with Gamepads
• PassSec update
• TORPEDO - web service for different checks
• TORPEDO - Enabling to put identified phishing e-mails into the KIT-spam folder
• Privacy friendly and security friendly marketing analysis tool

Conducting Usable Security User studies (online studies only)

These topics are related to how to set up and conducting user studies of various types. This year, due to the Corona outbreak, we decided to conduct online studies only; otherwise, interviews and in lab studies would have been possible. At the end of the semester, the students present a report / paper and a talk in which they present their results.

Topics:

• Investigating the Corona outbreak impact on privacy and security users' perception.
• Correlation between misconceptions about password security.
• Comparative analysis of several tutorials for TORPEDO.
• Investigating user reactions to Facebook behavioural data collection.
• Usability and adoption of password managers.

Please, note that registration is not required to participate in the kick-off meeting.

This event counts towards the KASTEL certificate. Further information on how to obtain the certificate can be found on the SECUSO website https://secuso.aifb.kit.edu/Studium_und_Lehre.php) .

As reported on the KIT informational page for the Corona outbreak ( https://www.kit.edu/kit/25911.php ), all teaching and in-person contact are forbid until new noticed. If the KIT restrictions are still in effect on the kick-off date, this will still take place at the date and time programmed, albeit in an online form.

In any case, we will inform you promptly as soon a more precise decision is reached.