05-436 / 05-836 / 08-534 / 08-734 / 19-534 / 19-734 Usable Privacy and Security
Print your homework out and submit it in person at the start of class
(3:00pm) on Monday, May 1. Homework will not be accepted after 3:00pm on that day.
Part 1 (100 points):
Identify a folk model of security or privacy that includes an
inaccurate model that results in users making poor decisions or
failing to take precautions that would be in their best interest.
This may be a folk model discussed in a
paper you have read or that you have observed in practice.
- Describe the folk model
- In what situations have you have observed it? Or where have you
read about it?
- What is
inaccurate about it?
- How does it lead users to make poor decisions
or fail to take security or privacy precautions?
Come up with an approach to help teach users a more accurate model
or guide them to take precautions or make better decisions despite
this model. This may take the form of a web page, poster, video,
software, game etc.
- State the goal(s) of your approach (e.g. Help users understand...., or encourage users to do....)
- Create a mock-up of your proposed approach. For example, design a
web page, write the script of a video and include a rough storyboard
(or create the video if you prefer), create screen shots of
software, etc. If you create something that can't be handed in on
paper in your homework, put it online somewhere and include the URL.
- Write the methodology for a user study to test whether this
approach is successful in meeting your stated goals. Be sure to
include information on type of study, number of participants,
participant selection criteria, type of data to be collected, how
data will be analyzed, etc. (You do not
need to actually carry out the user study.)
Part 2 (9-unit students should not do this part. 12-unit students will
receive between 0 and 75 points for this part): Write a 3--7 sentence
summary and short "highlight" for one optional reading assigned for the
April 12, April 17, April 24, April 26, and May 1 classes.