Usable Security and Authentication Lecture

Vocabulary flashcards focusing on usable security research, authentication evaluation frameworks, password alternatives, and passkey concepts from the lecture transcript.

Carleton University

A Canadian university noted in the lecture as having been considered the second most active usable security group in the world after Carnegie Mellon.

Password Paradox

The situation where passwords remain the dominant web authentication method despite their well-known security weaknesses, poor user experience, and the existence of numerous alternative technologies.

UDS Framework

A framework proposed by Joseph Bonneau and co-authors that evaluates authentication schemes across 25 benefits categorized into Usability, Deployability, and Security.

Usability (UDS Framework)

A dimension in the UDS framework evaluating 8 specific benefits related to cognitive load, operational friction, and account scale and recovery.

Deployability (UDS Framework)

A dimension in the UDS framework evaluating 6 benefits concerning practical adoption at scale, including accessibility, cost per user, integration with existing infrastructure, and non-proprietary status.

Security (UDS Framework)

A dimension in the UDS framework evaluating 11 benefits regarding resistance to attacks (such as guessing, phishing, theft, observation) as well as user privacy and trust considerations.

Passkeys

An authentication scheme using public-key cryptography where a private key is securely stored in a device hardware module and unlocked locally to sign authentication challenges.

Secure Enclave

The secure hardware module on Apple devices where private keys are stored so that they cannot leave the device and can only be used to sign authentication challenges following local unlock.

TPM (Trusted Platform Module)

The secure hardware module in the PC ecosystem used to store cryptographic private keys directly on the hardware device.

Federated Logins

Third-party authentication services, such as Sign in with Google or Sign in with Apple, that offer usability benefits by allowing users to access multiple websites using an existing identity provider.