HCI AND SECURITY

Topic consist of two different Questions

1. What is HUMAN COMPUTER INTERACTION?

2. What is SECURITY?
 WHAT IS HUMAN COMPUTER INTERACTION?

 It is the study of relationship between humans and computer…!!!

 What Is Security?

 The term security is the "ability of an individual to control the terms under which
their personal information is acquired and used"...
 HCI And Security term is
specifically relates to Information
Security...
 In General terms, its aim is to HCI & SECURITY
improve the usability of security
features in end users applications...
 From the perspective of the security
community, many security problems Reason of
are due to bad interaction between
humans and systems...
Security Issues
 HOW TO IMPROVE SECURITY?
 There are many computer
applications that provide some DESIGN OF USER
security functionality. However if
users do not know how to use it, INTERFACE
their systems will still be vulnerable.
 LEVEL OF ONLINE HELP THAT CAN BE PROVIDED?

Help for all the features and assistance should be available

 System Must be Easy to Use not So
Complex Due to Security EASE OF USE
Properties....
GOALS OF SECURITY
Accessible when needed...
Means Data or Information is easily
accessible or Available when its AVAILABILITY
need...
Crypto & limit access
Means important or specific
Information accessed to that
specific person not its available as CONFIDENTIALITY
whole....
 DATA INTERGRITY
Prevent modifying your data…

CONTROL
ACCESS Rights And Physical Security

AUDIT
Logging, review & damage assesment
GUIDELINES TO IMPROVE SECURITY
 Visible system state and security functions
All the applications and security feature should be visible
Security Should be easily used
Security settings and related data should easy to find and use
Easy to setup security settings
Settings should be easy so that user can choose settings they want
Make the user feel protected
Suitable Help and documentation for the available security
Help for all the features and assistance should be available
Allow customization without risk to be trapped
In any mistaken situation default values should be stored easily
 Security should not reduce performance
Use of appropriate techniques and algorithms
 Handle errors appropriately
Appropriate tools for errors should be available
THANK YOU