Photography
SameGame
Home
Viz
Riastradh
CompSec
"I do not know what I may appear to the world, but to myself I seem to have been only like a boy playing on the sea-shore, and diverting myself in now and then finding a smoother pebble or a prettier shell than ordinary, whilst the great ocean of truth lay all undiscovered before me."
- Isaac Newton

Computer Security

Protocols

OAuth Specification
Internet-community developed protocol for delegated auth to which I contributed.

Please Permit Me: Stateless Delegated Authorization in Mashups
Paper written with former intern Ragib Hasan on a stateless delegated authentication protocol, presented at ACSAC 2008.

Introduction to Cryptography and Network Security
Presentations prepared during an undergrad independent study, drawing from Cryptography and Network Security: Principles and Practice, 2nd Ed.

HCISEC

Intro to HCISEC Presentation  (ppt)
This is a presentation I developed as an introduction to HCI security. It is based on Why Johnny Can't Encrypt and User Interface Design for Secure Systems.

  • Presented to NEU's HCI Seminar - Spring 2005
  • Presented to NEU's HCI Undergraduate Course - Spring 2005
Change Password UI Study
This is a study I am conducting on how changing the password selection user interface affects password quality. The site currently includes a CHI2006 work-in-progress paper with posters, a SOUPS2006 poster (with abstract), a presentation on the design of the study delivered at SOUPS2006 along with a study construction kit for those wishing to replicate the study.

HCISEC Links

Northeastern CC&IS HCI Site
HCISec Bibliography
PEW Internet & American Life Project
The Risks Digest
Ka-Ping's Usable Security Blog
Symposium On Usable Privacy and Security

Copyright 2005-2014 R. Conlan