6133036
Serial hook-ups: a comparative usability study of secure device pairing methods
Secure Device Pairing is the bootstrapping of secure communication between two previously unassociated devices over a wireless channel. The human-imperceptible nature of wireless communication, lack of any prior security context, and absence of a common trust infrastructure open the door for Man-in-the-Middle (aka Evil Twin) attacks. A number of methods have been proposed to mitigate these attacks, each requiring user assistance in authenticating information exchanged over the wireless channel via some human-perceptible auxiliary channels, e.g., visual, acoustic or tactile.
 In this paper, we present results of the first comprehensive and comparative study of eleven notable secure device pairing methods. Usability measures include: task performance times, ratings on System Usability Scale (SUS), task completion rates, and perceived security. Study subjects were controlled for age, gender and prior experience with device pairing. We present overall results and identify problematic methods for certain classes of users as well as methods best-suited for various device configurations.
2369938
Human-Currency Interaction: learning from virtual currency use in China
What happens when the domains of HCI design and money intersect? This paper presents analyses from an ethnographic study of virtual currency use in China to discuss implications for game design, and HCI design more broadly. We found that how virtual currency is perceived, obtained, and spent can critically shape gamers' behavior and experience. Virtual and real currencies can interact in complex ways that promote, extend, and/or interfere with the value and character of game worlds. Bringing money into HCI design heightens existing issues of realness, trust, and fairness, and thus presents new challenges and opportunities for user experience innovation.
269891
Respecting Users' Individual Privacy Constraints in Web Personalization
Web personalization has demonstrated to be advantageous for both online customers and vendors. However, its benefits may be severely counter acted by privacy constraints. Personalized systems need to take users' privacy concerns into account, as well as privacy laws and industry self-regulation that may be in effect. In this paper, we first discuss how these constraints may affect web-based personalized systems. We then explain in what way current approaches to this problem fall short of their aims, specifically regarding the need to tailor privacy to the constraints of each individual user. We present a dynamic privacy-enhancing user modeling framework as a superior alternative, which is based on a software product line architecture. Our system dynamically selects personalization methods during runtime that respect users' current privacy concerns as well as the privacy laws and regulations that apply to them.
14397325
Constraint-Sensitive Privacy Management for Personalized Web-Based Systems
This research aims at reconciling web personalization with privacy constraints imposed by legal restrictions and by users' privacy preferences. We propose a software product line architecture approach, where our privacyenabling user modeling architecture can dynamically select personalization methods that satisfy current privacy constraints to provide personalization services. A feasibility study is being carried out with the support of an existing user modeling server and a software architecture based development environment.
13286603
Privacy in Online Social Networking at Workplace
Employees using social network sites (SNS) at workplace is a fact. As companies are further embracing social media, how if at all does this practice affect the work dynamics? While privacy has been a hot topic in online social network research in general, there is little work investigating the privacy aspect of this practice at workplace. This paper aims at starting the groundwork towards filling the gap. Based on a review of existing literature in social networks and workplace studies, we hypothesize a number of potential privacy issues in this work practice and suggest future research directions in this area.
1173197
Situating Productive Play: Online Gaming Practices and Guanxi in China
Economic activities in and around online gaming in China are often correlated in the West with practices of gold farming, or selling in-game currency to players for real money in online games. What can we learn about online gaming in China and about online gaming and online sociality more broadly when we look at economic and other "pragmatic" practices through which online gaming becomes meaningful to players? In this paper, we present findings from an ethnographic study of online gaming in China's urban Internet cafes to discuss implications for game design, and HCI design more broadly. Considering the ties between socio-economic practices, development of trust and culturally situated imaginings of self-hood and otherness, brings to the fore how online gaming in and of itself constitutes the means for practical achievements in day-to-day management of guanxi (social connection).
10165712
A Novel Secure Routing System in Overlay Environment
Routers are effective building blocks for Internet. It is almost impossible to modify router software only for applications. How to satisfy applications’ specific requirements of communication is a big problem. Now more and more systems begin to place application oriented routing service on overlay networks. This paper compares several overlay routing systems based on route number and brings forward a novel routing system based on trust model. System design principles are discussed and system simulation performance is analyzed. The results show that the system is able to provide secure routing service to applications in the case of vicious nodes.
16388786
Collecting Internet Malware Based on Client-side Honeypot
With the improvement of software security, attacks based on RPC vulnerabilities declined, however, attacks based on client application software vulnerabilities have increased. Such client application software includes Web browsers, email client and office. The spread of malware using these software vulnerabilities has become a severe threat to todaypsilas Internet. In allusion to this kind of threat, this paper designed an Internet malware collecting system based on client-side honeypot. This system can not only collect malware but also detect malicious Web site. It uses a unique network crawler based on client-side attack techniques to collect source of URL, and it collects URL and attachments from emails, then it creates software processes to open URL or files, and uses a device-drive monitor to detect malicious behaviors. It gives an alarm and locates the malicious file, and sends the malware coming through the Internet to the collecting server. We introduce the design and implement of this system and give the results.
35749769
EFSM-based Testing Strategy for APIs Test of Embedded OS
In this paper, we present a two-phase approach to generate test data for the EFSM model of an embedded operating system. We first build the EFSM model of the system. The model can then be used to automatically generate test data for testing of APIs. We also point out certain issues that need further study.
12687767
Comments on "Estimation of frequencies and damping factors by two-dimensional ESPRIT type methods"
For original paper, see Rouquette and Najim (IEEE Trans. Signal Process., vol.49, no.1, p.237-45, 2001).The original authors present two high-resolution approaches to estimate two-dimensional (2-D) signal parameters. The first approach decomposes the 2-D estimation problem into two one-dimensional (1-D) ones, estimates the 1-D frequencies with the MEMP method, and then forms correct pairs using a new pairing scheme introduced in Vanpoucke et al. (1994). The second method (the 2-D ESPRIT method) directly estimates the 2-D frequencies. It is shown that both methods are more accurate than the related methods. The present authors note that the original paper appears to have a key error in the permutation matrix specification of the first method. In this comment, they derive the correct one with the performance simulations.
37274241
Preparation of one-dimensional photonic crystal with variable period by using ultra-high vacuum electron beam evaporation
One-dimensional photonic crystal with variable period has been prepared by using the method of ultra-high vacuum electron beam evaporation. Advantage of this method is gaining variable period easily. The transmittance of the photonic crystal has been also studied.