SOUPS 2006: Pittsburgh, PA, USA

Lorrie Faith Cranor (Ed.): Proceedings of the 2nd Symposium on Usable Privacy and Security, SOUPS 2006, Pittsburgh, Pennsylvania, USA, July 12-14, 2006. ACM International Conference Proceeding Series 149 ACM 2006, ISBN 1-59593-448-0

Intelligible access control

Alexander J. DeWitt, Jasna Kuljis:
Aligning usability and security: a usability study of Polaris. 1-7
Carolyn Brodie, Clare-Marie Karat, John Karat:
An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench. 8-19
Xiang Cao, Lee Iverson:
Intentional access management: making access control usable for end-users. 20-31

Ka-Ping Yee, Kragen Sitaker:
Passpet: convenient password management and phishing protection. 32-43
Shirley Gaw, Edward W. Felten:
Password management strategies for online accounts. 44-55
Furkan Tari, A. Ant Ozok, Stephen H. Holden:
A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords. 56-66
Cynthia Kuo, Sasha Romanosky, Lorrie Faith Cranor:
Human selection of mnemonic phrase-based passwords. 67-78

Julie S. Downs, Mandy B. Holbrook, Lorrie Faith Cranor:
Decision strategies and susceptibility to phishing. 79-90
Anthony Y. Fu, Xiaotie Deng, Liu Wenyin, Greg Little:
The methodology and an application to fight against Unicode attacks. 91-101
Min Wu, Robert C. Miller, Greg Little:
Web wallet: preventing phishing attacks by revealing user intentions. 102-113

Paul A. Karger:
Privacy and security threat analysis of the federal employee personal identity verification (PIV) program. 114-121
Richard E. Newman, Sherman Gavette, Larry Yonge, Ross Anderson:
Protecting domestic power-line communications. 122-132
Julia Gideon, Lorrie Faith Cranor, Serge Egelman, Alessandro Acquisti:
Power strips, prophylactics, and privacy, oh my! 133-144
Jennifer Ann Rode, Carolina Johansson, Paul DiGioia, Roberto Silveira Silva Filho, Kari Nies, David H. Nguyen, Jie Ren, Paul Dourish, David F. Redmiles:
Seeing further: extending visualization as a basis for usable security. 145-155