Tentative schedule and Assignments (Autumn 2025)

This schedule is subject to change. Please check back frequently.


Week Date ACTION ITEMS
Tentative Topics Readings and Videos
Remarks






Week 1
23/7

Course Introduction : Logistics
why do we need usable security and privacy
Debate --  Do data privacy matter in AI tech?
Are the policy makers or developers
doing anything about it?


Required reading

--

Additional reading

--

24/7

25/7

Week 2
30/7



  -- see above --

31/7

1/8

Week 3
6/8

Introduction to security, privacy, usability
What  is security;
What is  privacy (including differential privacy);
What is usability;

Why is usability hard?

Required reading

1. "A Summary of Computer Misuse Techniques," by Peter G. Neumann and Donn B. Parker, from the 12th National Computer Security Conference, 1989 (page 396 of this report)

2. Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPA, N. Apthorpe, S. Varghese, N. Feamster, USENIX Security Symposium, 2019



Additional reading
3. Chapters 1 and 2 of Usable Security: History, Themes, and Challenges  

7/8

8/8

Week 4
12/8





 

13/8

14/8

Week 5
19/8

What started it all: usable encryption
aka the "Johnny" papers

Traditional techniques to measure usability of
secure/private systems

Research questions, surveys, interviews,
focus Groups,  diary Studies,
How to create questions

Biases/confounds to avoid while designing studies

 


Required reading
1. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0., A. Whitten and J.D. Tygar. Proceedings of USENIX Security 1999.

2. A Summary of Survey Methodology Best Practices
for Security and Privacy Researchers
, E. Redmilles, Y. Acar, S. Fahl and M. Mazurek, Tech report, UMD

3.  The Emperor's New Security Indicators: An evaluation of website authentication and the effect of role playing on usability studies, Schechter et al. , IEEE S&P'07

Additional reading

4. Likert scale examples,
Source: Vagias, Wade M. (2006). "Likert-type scale response anchors." Clemson International Institute for Tourism & Research Development, Department of Parks, Recreation and Tourism Management. Clemson University 

20/8

21/8

Week 6
26/8





-- see above

27/8

29/8

Week 7
2/9

Techniques of analyzing qualitative data
Coding techniques
inter-coder reliability



Required reading
1. "So-called privacy breeds evil" Narrative Justifications for Intimate Partner Surveillance in Online Forums, Bellini et al.

2. Digital technologies and intimate partner violence: A qualitative analysis with multiple stakeholders, Freed et al. 

3/9

4/9








Week 8
9/9


Analyzing quantitative
data with statistics
Introduction to statistics
Hypothesis testing
Case study: Longitudinal data management in cloud storage





Required reading
1. Basic Statistical Test Flow Chart
2. Choosing the correct statistical test made easy
3. Forgotten But Not Gone: Identifying the Need for
Longitudinal Data Management in Cloud Storage
, Khan et al., CHI 2018
4. Rethinking Connection Security Indicators, Felt et al., SOUPS'16
5. De-mystifying statistics (You can skip the data visualization, use R )


Additional reading
6. A Painless guide to Statistics (READ IT CAREFULLY)

7. Current Topics in Media Computing and HCI (Another introduction to hypothesis testing). RWTH Aachen.

10/9

11/9