Three Challenges for Embedding Security into Applications

In order to use them securely, current computer systems require end users to understand both the threats they are subject to and the details of technology necessary to protect against them. This is a requirement they have as of yet been unable to meet. We present thoughts about a new approach to building systems that are both usable and secure. Critically, we argue that this cannot be accomplished merely by providing a better interface on top of existing security technology and systems, that instead the underlying technology itself will need to change. We have begun a research program to build new, more usable security technologies and security-conscious applications. In this paper we present 3 interface design challenges we have found as a result of our experiences, and invite the HCI community to participate in addressing them.