Human-Centered Cybersecurity

Cryptography

Although cryptography is an essential component of modern computing, implementing cryptography correctly is a non-trivial undertaking, often resulting in developers making errors and introducing vulnerabilities into their cryptographic products.

Our cryptographic research is concerned with creating a baseline understanding of the practices and challenges of organizations that are developing products that use cryptography. This new understanding can help improve the assurance of cryptographic tools and the usability of cryptographic resources, such as standards and libraries.

Publications

Organizational Cryptographic Product Development

Papers

Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs – Julie Haney, Mary Theofanos, Yasemin Acar, & Sandra S. Prettyman. NISTIR 8241 (2018)

"We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products – Julie M. Haney, Mary F. Theofanos, Yasemin Acar & Sandra S. Prettyman. Proceedings of the Symposium on Usable Privacy and Security (SOUPS) (2018).

Organizational Practices in Cryptographic Development and Testing – Julie M. Haney, Simson L. Garfinkel, & Mary F. Theofanos. Proceedings of the IEEE Conference on Communications and Network Security (CNS) (2017).

Presentations

Crypto Reading Club 2021-12-15: "We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products - Julie Haney (2021)