Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints

Lee Livsey; Helen Petrie; Siamak F. Shahandashti; Aidan Fray

doi:10.1007/978-3-030-81111-2_17

Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints

Lee Livsey, Helen Petrie, Siamak F. Shahandashti, Aidan Fray

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

The security of messaging applications against person-in-the-middle attacks relies on the authenticity of the exchanged keys. For users unable to meet in person, a manual key fingerprint verification is necessary to ascertain key authenticity. Such fingerprints can be exchanged visually or verbally, and it is not clear in which condition users perform best. This paper reports the results of a 62-participant study that investigated differences in performance and perceived usability of visual and verbal comparisons of word-based key fingerprints, and the influence of the individual's cognitive learning style. The results show visual comparisons to be more effective against non-security critical errors and are perceived to provide increased confidence, yet participants perceive verbal comparisons to be easier and require less mental effort. Besides, limited evidence was found on the influence of the individual's learning style on their performance.

Original language	English
Title of host publication	International Symposium on Human Aspects of Information Security & Assurance, Proceedings
Publisher	Springer
Pages	199
Number of pages	210
Volume	613
DOIs	https://doi.org/10.1007/978-3-030-81111-2_17
Publication status	E-pub ahead of print - 8 Jul 2021
Event	International Symposium on Human Aspects of Information Security & Assurance - Online Duration: 7 Jul 2021 → 9 Jul 2021 Conference number: 15 https://haisa.org/

Conference

Conference	International Symposium on Human Aspects of Information Security & Assurance
Abbreviated title	HAISA
Period	7/07/21 → 9/07/21
Internet address	https://haisa.org/

Bibliographical note

This is an author-produced version of the published paper. Uploaded in accordance with the publisher’s self-archiving policy. Further copying may not be permitted; contact the publisher for details

Keywords

key fingerprint verification
verbal comparison
visual comparison
usability evaluation
· Index of Learning Styles
security

Access to Document

10.1007/978-3-030-81111-2_17

Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints
This is an author-produced version of the published paper. Uploaded in accordance with the publisher’s self-archiving policy. Further copying may not be permitted; contact the publisher for details
Accepted author manuscript, 508 KBLicence: CC BY-SA

https://arxiv.org/abs/2106.01131Licence: CC BY-SA

Cite this

@inproceedings{52a68eb0a0ee47139e1502c8e12dde34,

title = "Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints",

abstract = "The security of messaging applications against person-in-the-middle attacks relies on the authenticity of the exchanged keys. For users unable to meet in person, a manual key fingerprint verification is necessary to ascertain key authenticity. Such fingerprints can be exchanged visually or verbally, and it is not clear in which condition users perform best. This paper reports the results of a 62-participant study that investigated differences in performance and perceived usability of visual and verbal comparisons of word-based key fingerprints, and the influence of the individual's cognitive learning style. The results show visual comparisons to be more effective against non-security critical errors and are perceived to provide increased confidence, yet participants perceive verbal comparisons to be easier and require less mental effort. Besides, limited evidence was found on the influence of the individual's learning style on their performance.",

keywords = "key fingerprint verification, verbal comparison, visual comparison, usability evaluation, · Index of Learning Styles, security",

author = "Lee Livsey and Helen Petrie and Shahandashti, {Siamak F.} and Aidan Fray",

note = "This is an author-produced version of the published paper. Uploaded in accordance with the publisher{\textquoteright}s self-archiving policy. Further copying may not be permitted; contact the publisher for details ; International Symposium on Human Aspects of Information Security & Assurance, HAISA ; Conference date: 07-07-2021 Through 09-07-2021",

year = "2021",

month = jul,

day = "8",

doi = "10.1007/978-3-030-81111-2_17",

language = "English",

volume = "613",

pages = "199",

booktitle = "International Symposium on Human Aspects of Information Security & Assurance, Proceedings",

publisher = "Springer",

address = "Germany",

url = "https://haisa.org/",

}

Livsey, L, Petrie, H , Shahandashti, SF & Fray, A 2021, Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints. in International Symposium on Human Aspects of Information Security & Assurance, Proceedings. vol. 613, Springer, pp. 199, International Symposium on Human Aspects of Information Security & Assurance, 7/07/21. https://doi.org/10.1007/978-3-030-81111-2_17

TY - GEN

T1 - Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints

AU - Livsey, Lee

AU - Petrie, Helen

AU - Shahandashti, Siamak F.

AU - Fray, Aidan

N1 - Conference code: 15

PY - 2021/7/8

Y1 - 2021/7/8

N2 - The security of messaging applications against person-in-the-middle attacks relies on the authenticity of the exchanged keys. For users unable to meet in person, a manual key fingerprint verification is necessary to ascertain key authenticity. Such fingerprints can be exchanged visually or verbally, and it is not clear in which condition users perform best. This paper reports the results of a 62-participant study that investigated differences in performance and perceived usability of visual and verbal comparisons of word-based key fingerprints, and the influence of the individual's cognitive learning style. The results show visual comparisons to be more effective against non-security critical errors and are perceived to provide increased confidence, yet participants perceive verbal comparisons to be easier and require less mental effort. Besides, limited evidence was found on the influence of the individual's learning style on their performance.

AB - The security of messaging applications against person-in-the-middle attacks relies on the authenticity of the exchanged keys. For users unable to meet in person, a manual key fingerprint verification is necessary to ascertain key authenticity. Such fingerprints can be exchanged visually or verbally, and it is not clear in which condition users perform best. This paper reports the results of a 62-participant study that investigated differences in performance and perceived usability of visual and verbal comparisons of word-based key fingerprints, and the influence of the individual's cognitive learning style. The results show visual comparisons to be more effective against non-security critical errors and are perceived to provide increased confidence, yet participants perceive verbal comparisons to be easier and require less mental effort. Besides, limited evidence was found on the influence of the individual's learning style on their performance.

KW - key fingerprint verification

KW - verbal comparison

KW - visual comparison

KW - usability evaluation

KW - · Index of Learning Styles

KW - security

U2 - 10.1007/978-3-030-81111-2_17

DO - 10.1007/978-3-030-81111-2_17

M3 - Conference contribution

VL - 613

SP - 199

BT - International Symposium on Human Aspects of Information Security & Assurance, Proceedings

PB - Springer

T2 - International Symposium on Human Aspects of Information Security & Assurance

Y2 - 7 July 2021 through 9 July 2021

ER -