肉眼可解密：安全协议在用户界面的可视化
Decryptable to Your Eyes: Visualization of Security Protocols at the User Interface
摘要：
身份验证协议的设计，特别是对于在线银行服务和任何敏感性质的服务，是相当具有挑战性的。实际上，强制执行安全保证具有开销，因此强加了不总是满足可用性和用户需求的额外计算和设计考虑。另一方面，放松假设和严格的安全设计以改善用户体验可能会导致安全漏洞，从而损害用户对系统的信任。在本文中，我们展示了如何仔细的可视化设计，不仅可以提高安全性，而且可用性的认证过程。为此，我们提出了一个家庭的可视化认证协议，一个可视化的交易验证，和一个“解密到你的眼睛只”协议。通过严格的分析，我们验证了我们的协议是免疫的许多具有挑战性的认证攻击适用于在文献中。此外，使用我们的协议原型的广泛的案例研究，我们强调了我们的方法在现实世界中的部署的潜力：我们能够实现高水平的可用性，同时满足严格的安全要求。
英文摘要：
The design of authentication protocols, for online banking services in particular and any service that is of sensitive nature in general, is quite challenging. Indeed, enforcing security guarantees has overhead thus imposing additional computation and design considerations that do not always meet usability and user requirements. On the other hand, relaxing assumptions and rigorous security design to improve the user experience can lead to security breaches that can harm the users' trust in the system. In this paper, we demonstrate how careful visualization design can enhance not only the security but also the usability of the authentication process. To that end, we propose a family of visualized authentication protocols, a visualized transaction verification, and a "decryptable to your eyes only" protocol. Through rigorous analysis, we verify that our protocols are immune to many of the challenging authentication attacks applicable in the literature. Furthermore, using an extensive case study on a prototype of our protocols, we highlight the potential of our approach for real-world deployment: we were able to achieve a high level of usability while satisfying stringent security requirements.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
