The internship Security, Usability and Society will cover topics both of usable security and privacy programming, and how to conduct user studies. To reserve a place, please, register on hte WiWi portal and send an email with your chosen topic, plus a back-up one, to mattia.mossano@kit.edu before the kick-off. You can find a better description of the topics in ILIAS (link below). Topics are assigned first-come-first-served until all of them are filled. Topics in italics have been already assigned.

ILIAS link: https://ilias.studium.kit.edu/goto.php?target=crs_1792110&client_id=produktiv

Important dates:

Kick-off: 19.04.2022, 9:00-10:00 CET Uhr Microsoft Teams - - Link

Report + code submission : 09.09.2022, 23:59 CET

Presentation deadline : 25.09.2022, 23:59 CET

Presentation day: 28.09.2022, 16:00 CET

Topics:

Programming Usable Security Intervention

In this subject, students develop a part of coding, an extension, or another programming task dealing with various usable security interventions, eg as an extension. Eg TORPEDO (  https://secuso.aifb.kit.edu/english/TORPEDO.php  ) or PassSec + (  https://secuso.aifb.kit.edu/english/PassSecPlus.php  ). Just as before, students are provided with a point list of goals, containing both basic features mandatory to pass the course and more advanced ones that heighten the final grade.

• Portfolio Graphical Recognition-Based Passwords with Gamepads
• Improving the PassSec+ browser extension by investigating a security vulnerability in Mozilla Firefox Relay
• Development of a tool for the automated search for tweets on the topic of "phishing"
• Hacking TORPEDO
• Restructuring TORPEDO
• Authenticating on AR glasses: Implementing an authentication scheme for the Google Glass

Designing Security User studies (online studies only)

These topics are related to how to set up and conducting user studies of various types. This year, due to the Corona outbreak, we decided to conduct online studies only; otherwise, interviews and in lab studies would have been possible. At the end of the semester, the students present a report / paper and a talk in which they present their results.

• Investigate brainwaves authentication
• Replication and extension of "What is this URL's destination?"

Please, note that registration is not required to participate in the kick-off meeting.

This event counts towards the KASTEL certificate. Further information on how to obtain the certificate can be found on the SECUSO website https://secuso.aifb.kit.edu/Studium_und_Lehre.php) .