Event

The internship "Security, Usability, and Society" covers topics such as user-friendly security and data protection programs as well as the implementation of user studies. The kick-off and the final presentations will be in English. The language of communication with the supervisor can - depending on the topic / supervisor - be German.

Important dates:

Kick-off: (mandatory) 3.11.2020, 10:00-11:30, online. Link: Microsoft Teams

Final submission: 14.03.2021, 23:59

Presentation: March 14, 2021

Topics:

Privacy-friendly apps

In this topic area, students complete an app (or an extension of an app) among our Privacy-Friendly Apps (PFA). Please click the following link to know more about them: https://secuso.aifb.kit.edu/english/105.php . Students are provided with a point list of goals, containing both basic features mandatory to pass the course and more advanced ones that heighten the final grade.

• NoPhish 2.0
• Notes 2.0

Programming usable security measures

In this subject, students develop a part of coding, an extension, or another programming task dealing with various usable security interventions, eg as an extension. Some examples are TORPEDO (https://secuso.aifb.kit.edu/english/TORPEDO.php) orPassSec + (https://secuso.aifb.kit.edu/english/PassSecPlus.php). Just as for PFA, students are provided with a point list of goals, containing both basic features mandatory to pass the course and more advanced ones that heighten the final grade.

• Password Manager Enrolment Add-On
• Visualization app to explore Facebook behavioral data collection
• Portfolio Graphical Recognition-Based Passwords with Gamepads
• Implementation of an anti-phishing browser extension (English only)

Usable security user studies (online studies only)

These topics relate to setting up or analysing the results of user studies of various kinds. This year, due to the Corona outbreak, we decided to only run online studies. Otherwise interviews and laboratory tests would have been possible. At the end of the semester, the students present a report / work and a lecture in which they present their results.

• Investigating user reaction to password data breaches
• Expert feedback for an anti-phishing webpage template (English only)

Please, note that registration is not required to participate in the kick-off meeting.

This event counts towards the KASTEL certificate. Further information on how to obtain the certificate can be found on the SECUSO website (https://secuso.aifb.kit.edu/Studium_und_Lehre.php) .