Design and Analysis of Secure Exam Protocols

Doctoral thesis (2015)

A Secure Exam Protocol Without Trusted Parties

in ICT Systems Security and Privacy Protection. 30th IFIP TC 11 International Conference, SEC 2015, Hamburg, Germany, May 26-28, 2015 (2015)

Secure exams despite malicious management

in Twelfth Annual International Conference on Privacy, Security and Trust (PST), Ryerson University, Toronto, July 23-24, 2014 (2014)

Remark!: A Secure Protocol for Remote Exams

in Security Protocols XXII - Lecture Notes in Computer Science (2014)

Studies in Socio-Technical Security Analysis: Authentication of Identities with TLS Certificates

in IEEE TrustCom (2013)

Authenticating web identities with TLS certificates is a typical problem whose security depends on both technical and human aspects, and that needs, to be fully grasped, a socio-technical analysis. We ... [more ▼]

Authenticating web identities with TLS certificates is a typical problem whose security depends on both technical and human aspects, and that needs, to be fully grasped, a socio-technical analysis. We performed such an analysis, and in this paper we comment on the tools and methodology we found appropriate. We first analysed the interaction ceremonies between users and the most used browsers in the market. Then we looked at user's understanding of those interactions. Our tools and our methodology depend on whether the user model has a non-deterministic or a realistic behaviour. We successfully applied formal methods in the first case. In the second, we had to define a security framework consistent with research methods of experimental cognitive science. [less ▲]

A Socio-technical Understanding of TLS Certificate Validation

in Trust Management VII (2013)

Enforcing privacy in e-commerce by balancing anonymity and trust

in Computers & Security (2011), 30(8), 705-718