Sesame: informing user security decisions with system visualization

[Admin]

28. Stoll J. Tashman CS. Edward WK. Spafford K, 2008, Sesame: informing user security decisions with system visualization, Florence, ACM 978-1-60558-01.
a. How do users cope with such security decisions' some turn to online research in an attempt to comprehend the alerts.
b. Simply put, users are asked to make decisions about things they do not understand, based on information that is difficult to comprehend.
c. End-user security decisions present a troubling dilemmas On the one hand, because users must be involved in deciding at the work they want to lacy of these decisions are impossible to effectively automate.
d. Further, most of these decisions require a level of technical knowledge not possessed by most end-users.
e. We believed a spatial, direct-manipulation interface could yield a number of important benefits, die first of which is to leverage existing knowledge. second reason to use a visual representation ls speed.
f. To avoid deluging users with processes:
i. We show all processes that own windows as want to suggest to users that all of the interaction with computer is mediated by processes;
ii. We show all Processes that have ever connected to the network; and
iii. We cull any process that is a known-safe component of the Windows OS unless it is being controlled by another.
g. These three indicators provide users with a fast way of judging if a process is behaving abnormally.
h. Sesame users were more likely to identify' security threats accurately than users with more Topical software environments.