• DocumentCode
    2081000
  • Title

    Security analyzing and designing GUI with the resources model

  • Author

    Mehrnejad, Marzieh ; Toreini, Ehsan ; Bafghi, Abbas Ghaemi

  • Author_Institution
    Comput. Dept., Ferdowsi Univ., Mashhad, Iran
  • fYear
    2011
  • fDate
    14-15 Sept. 2011
  • Firstpage
    29
  • Lastpage
    36
  • Abstract
    Recently security problems in the Graphic User Interface (GUI) of applications have become a serious threat for system security. Because much of security experts don´t design the GUI from end user´s point of view, users have problems to practice security. The aim of Human & Computer Interaction (HCI) and Security (HCI-Sec) is to improve the usability of security features in end user applications. In this paper we apply the resources model (a model in HCI) to analyzing and designing system GUI with a security perspective to achieve a more secure and usable system. We studied Tests part of E-learning system in Ferdowsi University of Mashhad (FUM) as our case study. And we exploited faults that slow down user co-ordination with the system and used this model to explore design alternative. We generally analyzed GUI and proposed an alternative GUI in order to solve interaction problems. Finally we analyzed the GUI with a security perspective to improve the usability of security issues in this system. The results show this model works very well in the field of security.
  • Keywords
    expert systems; graphical user interfaces; human computer interaction; security of data; FUM; Ferdowsi University of Mashhad; GUI design; GUI security analysis; HCI-Sec; design alternative; e-learning system; graphic user interface; human & computer interaction and security; resources model; security experts; security features usability; security perspective; system security; usable system; user coordination; Business; Computational modeling; Security; Externalisation; GUI; HCI-sec; Interaction Strategy; Resources Model; Security Goals;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Information Security and Cryptology (ISCISC), 2011 8th International ISC Conference on
  • Conference_Location
    Mashhad
  • Print_ISBN
    978-1-4673-0078-0
  • Type

    conf

  • DOI
    10.1109/ISCISC.2011.6062341
  • Filename
    6062341