USEC 2012 Workshop on Usable Security
colocated with
Financial Cryptography and Data Security 2012
March 2, 2012
Divi Flamingo Beach Resort

Submissions must be received at the site by November 16, 2011.
Authors will be notified of acceptance by December 16th.
A final version for the workshop should be received by January 16th.

Many aspects of data security combine technical and human factors. If
a highly secure system is unusable, users will move their data to less
secure but more usable systems. Problems with usability are a major
contributor to many high-profile security failures today.

However, usable security is not well-aligned with traditional
usability for three reasons. First, security is rarely the desired
goal of the individual. In fact, security is usually orthogonal and
often in opposition to the actual goal. Second, security information
is about risk and threats. Such communication is most often unwelcome.
Increasing unwelcome interaction is not a goal of usable design.
Third, since individuals must trust their machines to implement their
desired tasks, risk communication itself may undermine the value of
the networked interaction. For the individual, discrete technical
problems are all understood under the rubric of online security (e.g.,
privacy from third parties use of personally identifiable information,
malware). A broader conception of both security and usability is
therefore needed for usable security.

The workshop on Usable Security invites submissions on all aspects of
human factors and usability in the context of security. USEC'12 aims
to bring together researchers already engaged in this
interdisciplinary effort with other researchers in areas such as
economics, intelligent interactions, artificial intelligence,
theoretical computer science, and modeling. We encourage AI, HCI,
security, psychologists, risk analysts, computer scientists, security
specialists, business school faculty, and industry experts to submit
original research. We particularly encourage collaborative research
from authors in multiple fields.