[an error occurred while processing this directive]<meta name="keywords" content="Department of Computer Science, publications, by type, Ivan Flechais"></meta><meta name="description" content="Publications, by type, Department of Computer Science, Oxford, Ivan Flechais"></meta><title>Department of Computer Science, University of Oxford: Ivan Flechais : Publications
</title><style type="text/css">
			  .btn-toolbar::after, .btn-toolbar::before
			  {
			    content: " ";
			    display: table;
			  }

			
			.btn-toolbar
			{
			    margin-bottom: 2em;
			}

			  .btn-toolbar::after, .btn-group::after
			  {
			    clear: both;
			  }


			.btn-toolbar .btn, .btn-toolbar .btn-group
			  {
			    float: left;
			}
			
			.btn-group
			  {
			    display: inline-block;
			    position: relative;
			    vertical-align: middle;
			}

			  .btn-group > .btn:first-child:not(:last-child)
			  {
			    border-bottom-right-radius: 0;
			    border-top-right-radius: 0;
			}
			
			.btn-group > .btn:first-child
			  {
			    margin-left: 0;
			}

			.btn-group > .btn
			  {
			    float: left;
			    position: relative;
			}

			  .btn-group > .btn:not(:first-child):not(:last-child)
			  {
			    border-radius: 0;
			}
			
			  .btn-group > .btn:last-child:not(:first-child)
			  {
			    border-bottom-left-radius: 0;
			    border-top-left-radius: 0;
			}
			
			.btn-group .btn + .btn, .btn-group .btn + .btn-group, .btn-group .btn-group + .btn, .btn-group .btn-group + .btn-group
			  {
			    margin-left: -2px;
			}
			</style>[an error occurred while processing this directive]<div class="content-width"><ol class="breadcrumb text-uppercase"><li><a href="/">Home</a></li><li><a href="/aboutus/">About Us</a></li><li><a href="/people/">People</a></li><li><a href="/people/faculty.html">Faculty</a></li><li><a href="/people/Ivan.Flechais"><span itemprop="name">Ivan Flechais</span></a></li><li class="active">Publications</li></ol></div><!-- MOBILE NAVIGATION --><div class="content-width space-below mobile-menu-placeholder visible-xs visible-sm"></div><!-- COLUMNS --><div class="container-fluid content-width"><div class="row"><div class="col-xs-12 col-md-9 col-md-push-3" id="maincontent"><!-- CONTENT (Column 2) --><div class="page-title"><h1>Ivan Flechais : Publications
</h1></div><div role="toolbar" class="btn-toolbar"><div class="btn-group"><a href="/people/publications/date/Ivan.Flechais.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-sort-by-attributes"></span> By date</a><a href="/people/publications/title/Ivan.Flechais.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-sort-by-attributes"></span> By title</a><a href="/people/publications/type/Ivan.Flechais.html" aria-hidden="true" type="button" class="btn btn-oxford-blue"><span class="glyphicon glyphicon-sort-by-attributes"></span> By type</a><a href="/people/publications/bibtex/Ivan.Flechais.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-file"></span> BibTex</a></div></div><p></p><h2>
      Book chapters
      </h2><ul class="list-unbulleted list-unbulleted-spaced"><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[1] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Usable Security: What Is It? How Do We Get It? </strong> </p>
	    <p class="publicationAuthors"> <em> M. A. Sasse and I. Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In Lorrie Faith Cranor and Simson Garfinkel, editors,
             
            <em>
            Security and Usability: Designing Secure Systems that People can Use</em>.
        O'Reilly Books.
        2005.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2329-abstract.html">
			Details <span class="sr-only" > about <em> Usable Security: What Is It? How Do We Get It?  </em></span> </a> |
			<a href="/publications/publication2329.bib">
			BibTeX  <span class="sr-only" > data for <em> Usable Security: What Is It? How Do We Get It?  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li></ul><h2>
      Journal papers
      </h2><ul class="list-unbulleted list-unbulleted-spaced"><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[1] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
        In <em>International Journal of Secure Software Engineering</em>.
        
            Vol. 2.
        
            No. 4.
        
                Pages 1&#x2013;18.
            2011.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication5417-abstract.html">
			Details <span class="sr-only" > about <em> Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework  </em></span> </a> |
			<a href="/publications/publication5417.bib">
			BibTeX  <span class="sr-only" > data for <em> Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[2] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Towards tool&#x2212;support for Usable Secure Requirements Engineering with CAIRIS </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
        In <em>International Journal of Secure Software Engineering</em>.
        
            Vol. 1.
        
            No. 3.
        
                Pages 56&#x2013;70.
            2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3536-abstract.html">
			Details <span class="sr-only" > about <em> Towards tool&#x2212;support for Usable Secure Requirements Engineering with CAIRIS  </em></span> </a> |
			<a href="/publications/publication3536.bib">
			BibTeX  <span class="sr-only" > data for <em> Towards tool&#x2212;support for Usable Secure Requirements Engineering with CAIRIS  </em></span>   </a>
			
			 | <a
		href="http://dx.doi.org/10.4018/ijsse.2010070104">
		DOI (10.4018/ijsse.2010070104)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[3] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Designing and Aligning e&#x2212;Science Security Culture with Design </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
        In <em>Information Management & Computer Security</em>.
        
            Vol. 18.
        
            No. 5.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3687-abstract.html">
			Details <span class="sr-only" > about <em> Designing and Aligning e&#x2212;Science Security Culture with Design  </em></span> </a> |
			<a href="/publications/publication3687.bib">
			BibTeX  <span class="sr-only" > data for <em> Designing and Aligning e&#x2212;Science Security Culture with Design  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[4] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Human Vulnerabilities in Security Systems </strong> </p>
	    <p class="publicationAuthors"> <em> Paul Kearney M. Angela Sasse Debi Ashenden Darren Lawrence Lizzie Coles&#x2212;Kemp Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
        In <em>Human Factors Working Group White Paper&#x201a; Cyber Security KTN Human Factors White Paper</em>.
        2007.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3606-abstract.html">
			Details <span class="sr-only" > about <em> Human Vulnerabilities in Security Systems  </em></span> </a> |
			<a href="/publications/publication3606.bib">
			BibTeX  <span class="sr-only" > data for <em> Human Vulnerabilities in Security Systems  </em></span>   </a>
			
			
					| <a href="http://www.ktn.qinetiq-tim.net/content/files/groups/humanvuln/HFWGWhitePaperfinal.pdf"> Download (pdf)  <span class="sr-only" > of <em> Human Vulnerabilities in Security Systems  </em></span>   </a>
  				
		
		</div> 
	</div> 
	
        </li></ul><h2>
      Conference papers
      </h2><ul class="list-unbulleted list-unbulleted-spaced"><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[1] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            "It Becomes More of an Abstract Idea&#x201a; this Privacy" &#x2212; Informing the Design for Communal Privacy Experiences in Smart Homes. </strong> </p>
	    <p class="publicationAuthors"> <em> Martin Kraemer&#x201a; Helena Webb&#x201a; George Chalhoub and Ivan Flechais.  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            International Journal of Human&#x2212;Computer Studies (IJHCS 2023)</em>.
        December,
            2023.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication15803-abstract.html">
			Details <span class="sr-only" > about <em> "It Becomes More of an Abstract Idea&#x201a; this Privacy" &#x2212; Informing the Design for Communal Privacy Experiences in Smart Homes.  </em></span> </a> |
			<a href="/publications/publication15803.bib">
			BibTeX  <span class="sr-only" > data for <em> "It Becomes More of an Abstract Idea&#x201a; this Privacy" &#x2212; Informing the Design for Communal Privacy Experiences in Smart Homes.  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/14368/kraemer-informing2023.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> "It Becomes More of an Abstract Idea&#x201a; this Privacy" &#x2212; Informing the Design for Communal Privacy Experiences in Smart Homes.  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1016/j.ijhcs.2023.103138">
		DOI (10.1016/j.ijhcs.2023.103138)
		</a> 
					| <a href="https://www.sciencedirect.com/science/article/pii/S1071581923001477"> Link <span class="sr-only" > to <em> "It Becomes More of an Abstract Idea&#x201a; this Privacy" &#x2212; Informing the Design for Communal Privacy Experiences in Smart Homes.  </em></span> </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[2] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Data Protection at a Discount: Investigating the UX of Data Protection from User&#x201a; Designer&#x201a; and Business Leader Perspectives </strong> </p>
	    <p class="publicationAuthors"> <em> George Chalhoub and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            The 25th ACM Conference On Computer&#x2212;Supported Cooperative Work And Social Computing (CSCW 2022)</em>.
        ACM.
        November,
            2022.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication14844-abstract.html">
			Details <span class="sr-only" > about <em> Data Protection at a Discount: Investigating the UX of Data Protection from User&#x201a; Designer&#x201a; and Business Leader Perspectives  </em></span> </a> |
			<a href="/publications/publication14844.bib">
			BibTeX  <span class="sr-only" > data for <em> Data Protection at a Discount: Investigating the UX of Data Protection from User&#x201a; Designer&#x201a; and Business Leader Perspectives  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/13944/discount2022.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Data Protection at a Discount: Investigating the UX of Data Protection from User&#x201a; Designer&#x201a; and Business Leader Perspectives  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1145/3555537">
		DOI (10.1145/3555537)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[3] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Exploring Bystanders&#x2019; Privacy Concerns with Smart Homes in Jordan </strong> </p>
	    <p class="publicationAuthors"> <em> Wael Albayaydh and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            CHI Conference on Human Factors in Computing Systems (CHI '22)&#x201a; April 29&#x2212;May 5&#x201a; 2022&#x201a; New Orleans&#x201a; LA&#x201a; USA</em>.
        2022.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication14797-abstract.html">
			Details <span class="sr-only" > about <em> Exploring Bystanders&#x2019; Privacy Concerns with Smart Homes in Jordan  </em></span> </a> |
			<a href="/publications/publication14797.bib">
			BibTeX  <span class="sr-only" > data for <em> Exploring Bystanders&#x2019; Privacy Concerns with Smart Homes in Jordan  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/13286/Exploring%20Bystanders%E2%80%99%20Privacy%20Concerns%20with%20Smart%20Homes%20in%20Jordan.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Exploring Bystanders&#x2019; Privacy Concerns with Smart Homes in Jordan  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1145/3491102.3502097">
		DOI (10.1145/3491102.3502097)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[4] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            "It did not give me an option to decline": A Longitudinal Analysis of the User Experience of Security and Privacy in Smart Home Products </strong> </p>
	    <p class="publicationAuthors"> <em> George Chalhoub&#x201a; Martin J. Kraemer&#x201a; Norbert Nthala and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            2021 CHI Conference on Human Factors in Computing Systems (CHI 2021)</em>.
        ACM.
        May,
            2021.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication14433-abstract.html">
			Details <span class="sr-only" > about <em> "It did not give me an option to decline": A Longitudinal Analysis of the User Experience of Security and Privacy in Smart Home Products  </em></span> </a> |
			<a href="/publications/publication14433.bib">
			BibTeX  <span class="sr-only" > data for <em> "It did not give me an option to decline": A Longitudinal Analysis of the User Experience of Security and Privacy in Smart Home Products  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/12703/chi2021-chalhoub.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> "It did not give me an option to decline": A Longitudinal Analysis of the User Experience of Security and Privacy in Smart Home Products  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1145/3411764.3445691">
		DOI (10.1145/3411764.3445691)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[5] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            "Alexa&#x201a; are you spying on me?": Exploring the Effect of User Experience on the Security and Privacy of Smart Speaker Users </strong> </p>
	    <p class="publicationAuthors"> <em> George Chalhoub and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            22nd International Conference on Human&#x2212;Computer Interaction (HCII 2020)</em>.
        Springer.
        July,
            2020.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication14134-abstract.html">
			Details <span class="sr-only" > about <em> "Alexa&#x201a; are you spying on me?": Exploring the Effect of User Experience on the Security and Privacy of Smart Speaker Users  </em></span> </a> |
			<a href="/publications/publication14134.bib">
			BibTeX  <span class="sr-only" > data for <em> "Alexa&#x201a; are you spying on me?": Exploring the Effect of User Experience on the Security and Privacy of Smart Speaker Users  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/12026/alexa-hcii2020.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> "Alexa&#x201a; are you spying on me?": Exploring the Effect of User Experience on the Security and Privacy of Smart Speaker Users  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1007/978-3-030-50309-3_21">
		DOI (10.1007/978-3-030-50309-3_21)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[6] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras </strong> </p>
	    <p class="publicationAuthors"> <em> George Chalhoub&#x201a; Ivan Flechais&#x201a; Norbert Nthala and Ruba Abu&#x2212;Salma  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020)</em>.
        USENIX Association.
        August,
            2020.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication14133-abstract.html">
			Details <span class="sr-only" > about <em> Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras  </em></span> </a> |
			<a href="/publications/publication14133.bib">
			BibTeX  <span class="sr-only" > data for <em> Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/12040/soups2020-chalhoub.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras  </em></span>

					    </a>


				    
					| <a href="https://www.usenix.org/conference/soups2020/presentation/chalhoub"> Link <span class="sr-only" > to <em> Innovation Inaction or In Action? The Role of User Experience in the Security and Privacy Design of Smart Home Cameras  </em></span> </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[7] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Factoring User Experience into the Security and Privacy Design of Smart Home Devices: A Case Study </strong> </p>
	    <p class="publicationAuthors"> <em> George Chalhoub&#x201a; Ivan Flechais&#x201a; Norbert Nthala&#x201a; Ruba Abu&#x2212;Salma and Elie Tom  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Extended Abstracts of the 2020 CHI Conference on Human Factors in Computing Systems (CHI EA 2020)</em>.
        ACM.
        April,
            2020.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication13846-abstract.html">
			Details <span class="sr-only" > about <em> Factoring User Experience into the Security and Privacy Design of Smart Home Devices: A Case Study  </em></span> </a> |
			<a href="/publications/publication13846.bib">
			BibTeX  <span class="sr-only" > data for <em> Factoring User Experience into the Security and Privacy Design of Smart Home Devices: A Case Study  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/11860/casestudy-chi2020.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Factoring User Experience into the Security and Privacy Design of Smart Home Devices: A Case Study  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1145/3334480.3382850">
		DOI (10.1145/3334480.3382850)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[8] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Policies in Context: Factors Influencing the Elicitation and Categorisation of Context&#x2212;Sensitive Security Policies </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily&#x201a; John Lyle&#x201a; Ivan Flechais&#x201a; Andrea Atzeni&#x201a; Cesare Cameroni&#x201a; Hans Myrhaug&#x201a; Ayse Goker and Robert Kleinfeld  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the Workshop on Home Usable Privacy and Security</em>.
        2013.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication6959-abstract.html">
			Details <span class="sr-only" > about <em> Policies in Context: Factors Influencing the Elicitation and Categorisation of Context&#x2212;Sensitive Security Policies  </em></span> </a> |
			<a href="/publications/publication6959.bib">
			BibTeX  <span class="sr-only" > data for <em> Policies in Context: Factors Influencing the Elicitation and Categorisation of Context&#x2212;Sensitive Security Policies  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[9] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract) </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily&#x201a; David Power&#x201a; Philip Armstrong and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Trust and Trustworthy Computing&#x201a; 6th International Conference&#x201a; TRUST 2013</em>.
        2013.
        </p> <p
            class="publicationNote"> To Appear</p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication6821-abstract.html">
			Details <span class="sr-only" > about <em> Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)  </em></span> </a> |
			<a href="/publications/publication6821.bib">
			BibTeX  <span class="sr-only" > data for <em> Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[10] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of BCS HCI 2012 Workshops: Designing Interactive Secure Systems</em>.
        
                Pages 3:1&#x2013;3:4.
            2012.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication6188-abstract.html">
			Details <span class="sr-only" > about <em> Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS  </em></span> </a> |
			<a href="/publications/publication6188.bib">
			BibTeX  <span class="sr-only" > data for <em> Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4881/clldiss.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[11] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Personal PKI for the smart device era </strong> </p>
	    <p class="publicationAuthors"> <em> John Lyle&#x201a; Andrew Paverd&#x201a; Justin King&#x2212;Lacroix&#x201a; Andrea Atzeni&#x201a; Habib Virji&#x201a; Ivan Flechais and Shamal Faily  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            9th European PKI Workshop: Research and Applications</em>.
        2012.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication6186-abstract.html">
			Details <span class="sr-only" > about <em> Personal PKI for the smart device era  </em></span> </a> |
			<a href="/publications/publication6186.bib">
			BibTeX  <span class="sr-only" > data for <em> Personal PKI for the smart device era  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4874/personal-pki.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Personal PKI for the smart device era  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[12] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            On the design and development of webinos: a distributed mobile application middleware </strong> </p>
	    <p class="publicationAuthors"> <em> John Lyle&#x201a; Shamal Faily&#x201a; Ivan Flechais&#x201a; Andre Paul&#x201a; Ayse Goker&#x201a; Hans Myrhaug&#x201a; Heiko Desruelle and Andrew Martin  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 12th IFIP WG 6.1 international conference on Distributed applications and interoperable systems</em>.
        
                Pages 140&#x2013;147.
            2012.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication5957-abstract.html">
			Details <span class="sr-only" > about <em> On the design and development of webinos: a distributed mobile application middleware  </em></span> </a> |
			<a href="/publications/publication5957.bib">
			BibTeX  <span class="sr-only" > data for <em> On the design and development of webinos: a distributed mobile application middleware  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4875/dais-middleware.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> On the design and development of webinos: a distributed mobile application middleware  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[13] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Eliciting Usable Security Requirements with Misusability Cases </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 19th IEEE International Requirements Engineering Conference</em>.
        
                Pages 339&#x2013;340.
            IEEE Computer Society.
        2011.
        </p> <p
            class="publicationNote"> Pre&#x2212;print available at http://www.cs.ox.ac.uk/files/4125/PID1921187.pdf</p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication5050-abstract.html">
			Details <span class="sr-only" > about <em> Eliciting Usable Security Requirements with Misusability Cases  </em></span> </a> |
			<a href="/publications/publication5050.bib">
			BibTeX  <span class="sr-only" > data for <em> Eliciting Usable Security Requirements with Misusability Cases  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4125/re11Poster.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Eliciting Usable Security Requirements with Misusability Cases  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1109/RE.2011.6051665">
		DOI (10.1109/RE.2011.6051665)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[14] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Here's Johnny: a Methodology for Developing Attacker Personas </strong> </p>
	    <p class="publicationAuthors"> <em> Andrea Atzeni&#x201a; Shamal Faily&#x201a; John Lyle&#x201a; Cesare Cameroni and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 6th International Conference on Availability&#x201a; Reliability and Security</em>.
        
                Pages 722&#x2013;727.
            2011.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication4918-abstract.html">
			Details <span class="sr-only" > about <em> Here's Johnny: a Methodology for Developing Attacker Personas  </em></span> </a> |
			<a href="/publications/publication4918.bib">
			BibTeX  <span class="sr-only" > data for <em> Here's Johnny: a Methodology for Developing Attacker Personas  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4007/PID1871807.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Here's Johnny: a Methodology for Developing Attacker Personas  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[15] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            User&#x2212;Centered Information Security Policy Development in a Post&#x2212;Stuxnet World </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 6th International Conference on Availability&#x201a; Reliability and Security</em>.
        
                Pages 716&#x2013;721.
            2011.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication4916-abstract.html">
			Details <span class="sr-only" > about <em> User&#x2212;Centered Information Security Policy Development in a Post&#x2212;Stuxnet World  </em></span> </a> |
			<a href="/publications/publication4916.bib">
			BibTeX  <span class="sr-only" > data for <em> User&#x2212;Centered Information Security Policy Development in a Post&#x2212;Stuxnet World  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4008/secse2011.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> User&#x2212;Centered Information Security Policy Development in a Post&#x2212;Stuxnet World  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[16] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Persona Cases: A Technique for grounding Personas </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            CHI '11: Proceedings of the 29th International conference on Human factors in computing systems</em>.
        
                Pages 2267&#x2212;2270.
            Vancouver&#x201a; BC&#x201a; Canada.
        2011.
        ACM.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication4065-abstract.html">
			Details <span class="sr-only" > about <em> Persona Cases: A Technique for grounding Personas  </em></span> </a> |
			<a href="/publications/publication4065.bib">
			BibTeX  <span class="sr-only" > data for <em> Persona Cases: A Technique for grounding Personas  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[17] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Security through Usability: a user&#x2212;centered approach for balanced security policy requirements </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Poster at: Annual Computer Security Applications Conference</em>.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3963-abstract.html">
			Details <span class="sr-only" > about <em> Security through Usability: a user&#x2212;centered approach for balanced security policy requirements  </em></span> </a> |
			<a href="/publications/publication3963.bib">
			BibTeX  <span class="sr-only" > data for <em> Security through Usability: a user&#x2212;centered approach for balanced security policy requirements  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/3633/acsacPoster.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Security through Usability: a user&#x2212;centered approach for balanced security policy requirements  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[18] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Security and Usability: Searching for the philosopher's stone </strong> </p>
	    <p class="publicationAuthors"> <em> Ivan Flechais and Shamal Faily  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Workshop on the development of EuroSOUPS (European Symposium on Usable Privacy and Security)</em>.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3913-abstract.html">
			Details <span class="sr-only" > about <em> Security and Usability: Searching for the philosopher's stone  </em></span> </a> |
			<a href="/publications/publication3913.bib">
			BibTeX  <span class="sr-only" > data for <em> Security and Usability: Searching for the philosopher's stone  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/3484/esoups.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Security and Usability: Searching for the philosopher's stone  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[19] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Analysing and Visualising Security and Usability in IRIS </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Availability&#x201a; Reliability and Security&#x201a; 2010. ARES 10. Fifth International Conference on</em>.
        February,
            2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3361-abstract.html">
			Details <span class="sr-only" > about <em> Analysing and Visualising Security and Usability in IRIS  </em></span> </a> |
			<a href="/publications/publication3361.bib">
			BibTeX  <span class="sr-only" > data for <em> Analysing and Visualising Security and Usability in IRIS  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/2595/PID1069709.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Analysing and Visualising Security and Usability in IRIS  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1109/ARES.2010.28">
		DOI (10.1109/ARES.2010.28)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[20] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            A Meta&#x2212;Model for Usable Secure Requirements Engineering </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Software Engineering for Secure Systems&#x201a; 2010. SESS '10. ICSE Workshop on</em>.
        
                Pages 29&#x2013;35.
            May,
            2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3510-abstract.html">
			Details <span class="sr-only" > about <em> A Meta&#x2212;Model for Usable Secure Requirements Engineering  </em></span> </a> |
			<a href="/publications/publication3510.bib">
			BibTeX  <span class="sr-only" > data for <em> A Meta&#x2212;Model for Usable Secure Requirements Engineering  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/2898/sessTex.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> A Meta&#x2212;Model for Usable Secure Requirements Engineering  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1145/1809100.1809105">
		DOI (10.1145/1809100.1809105)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[21] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Improving Secure Systems Design with Security Culture </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Poster at: Human Factors in Information Security</em>.
        February,
            2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3511-abstract.html">
			Details <span class="sr-only" > about <em> Improving Secure Systems Design with Security Culture  </em></span> </a> |
			<a href="/publications/publication3511.bib">
			BibTeX  <span class="sr-only" > data for <em> Improving Secure Systems Design with Security Culture  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/2863/hfisPoster.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Improving Secure Systems Design with Security Culture  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[22] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Barry is not the weakest link: Eliciting Secure System Requirements with Personas </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 24th British HCI Group Annual Conference on People and Computers: Play is a Serious Business</em>.
        
                Pages 113&#x2013;120.
            British Computer Society.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3588-abstract.html">
			Details <span class="sr-only" > about <em> Barry is not the weakest link: Eliciting Secure System Requirements with Personas  </em></span> </a> |
			<a href="/publications/publication3588.bib">
			BibTeX  <span class="sr-only" > data for <em> Barry is not the weakest link: Eliciting Secure System Requirements with Personas  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/3104/paper%2042.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Barry is not the weakest link: Eliciting Secure System Requirements with Personas  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[23] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            HCSE'2010: Proceedings of the 3rd Conference on Human&#x2212;Centered Software Engineering</em>.
        
                Pages 111&#x2013;118.
            Springer.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3657-abstract.html">
			Details <span class="sr-only" > about <em> The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design  </em></span> </a> |
			<a href="/publications/publication3657.bib">
			BibTeX  <span class="sr-only" > data for <em> The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/3164/hcse.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[24] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            NSPW '10: Proceedings of the 2010 New Security Paradigms Workshop</em>.
        
                Pages 73&#x2013;84.
            New York&#x201a; NY&#x201a; USA.
        2010.
        ACM.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3630-abstract.html">
			Details <span class="sr-only" > about <em> To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design  </em></span> </a> |
			<a href="/publications/publication3630.bib">
			BibTeX  <span class="sr-only" > data for <em> To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/3163/nspw1008-faily.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[25] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            A Model of Security Culture for e&#x2212;Science </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In Nathan Clarke&#x201a; Steven Furnell and Rossouw von Solms, editors,
             
            <em>
            Proceedings of the South African Information Security Multi&#x2212;Conference (SAISMC 2010)</em>.
        
                Pages 154&#x2013;164.
            University of Plymouth.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3550-abstract.html">
			Details <span class="sr-only" > about <em> A Model of Security Culture for e&#x2212;Science  </em></span> </a> |
			<a href="/publications/publication3550.bib">
			BibTeX  <span class="sr-only" > data for <em> A Model of Security Culture for e&#x2212;Science  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/2956/haisaWord.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> A Model of Security Culture for e&#x2212;Science  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[26] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios </strong> </p>
	    <p class="publicationAuthors"> <em> A. W. Roscoe Ronald Kainda Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of the 2010 Symposium on Usable Privacy and Security (SOUPS 2010)</em>.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3605-abstract.html">
			Details <span class="sr-only" > about <em> Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios  </em></span> </a> |
			<a href="/publications/publication3605.bib">
			BibTeX  <span class="sr-only" > data for <em> Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[27] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Secure and Usable Out&#x2212;Of&#x2212;Band Channels for Ad hoc Mobile Device Interactions </strong> </p>
	    <p class="publicationAuthors"> <em> Ronald Kainda&#x201a; Ivan Flechais and A.W Roscoe  </em> </p>
	
	<p class="publicationDetails"> 2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3604-abstract.html">
			Details <span class="sr-only" > about <em> Secure and Usable Out&#x2212;Of&#x2212;Band Channels for Ad hoc Mobile Device Interactions  </em></span> </a> |
			<a href="/publications/publication3604.bib">
			BibTeX  <span class="sr-only" > data for <em> Secure and Usable Out&#x2212;Of&#x2212;Band Channels for Ad hoc Mobile Device Interactions  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[28] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Security and Usability: Analysis and Evaluation </strong> </p>
	    <p class="publicationAuthors"> <em> A. W. Roscoe Ronald Kainda Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3603-abstract.html">
			Details <span class="sr-only" > about <em> Security and Usability: Analysis and Evaluation  </em></span> </a> |
			<a href="/publications/publication3603.bib">
			BibTeX  <span class="sr-only" > data for <em> Security and Usability: Analysis and Evaluation  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[29] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Secure Mobile Ad&#x2212;hoc Interactions: Reasoning About Out&#x2212;Of&#x2212;Band (OOB) Channels </strong> </p>
	    <p class="publicationAuthors"> <em> A. W. Roscoe Ronald Kainda Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Proceedings of IWSSI 2010&#x201a; Second International Workshop on Security for Spontaneous Interaction&#x201a; The Eighth International Conference on Pervasive Computing (Pervasive 2010)</em>.
        2010.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3602-abstract.html">
			Details <span class="sr-only" > about <em> Secure Mobile Ad&#x2212;hoc Interactions: Reasoning About Out&#x2212;Of&#x2212;Band (OOB) Channels  </em></span> </a> |
			<a href="/publications/publication3602.bib">
			BibTeX  <span class="sr-only" > data for <em> Secure Mobile Ad&#x2212;hoc Interactions: Reasoning About Out&#x2212;Of&#x2212;Band (OOB) Channels  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[30] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Context&#x2212;Sensitive Requirements and Risk Management with IRIS </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            International Requirements Engineering&#x201a; 2009. RE'09. 17th IEEE</em>.
        IEEE.
        August,
            2009.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3182-abstract.html">
			Details <span class="sr-only" > about <em> Context&#x2212;Sensitive Requirements and Risk Management with IRIS  </em></span> </a> |
			<a href="/publications/publication3182.bib">
			BibTeX  <span class="sr-only" > data for <em> Context&#x2212;Sensitive Requirements and Risk Management with IRIS  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4499/re09Poster.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Context&#x2212;Sensitive Requirements and Risk Management with IRIS  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1109/RE.2009.54">
		DOI (10.1109/RE.2009.54)
		</a> 
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[31] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Usability and Security of Out&#x2212;Of&#x2212;Band Channels in Secure Device Pairing Protocols </strong> </p>
	    <p class="publicationAuthors"> <em> A. W. Roscoe Ronald Kainda Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            SOUPS '09: Proceedings of the 5th Symposium on Usable Privacy and Security</em>.
        2009.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication3601-abstract.html">
			Details <span class="sr-only" > about <em> Usability and Security of Out&#x2212;Of&#x2212;Band Channels in Secure Device Pairing Protocols  </em></span> </a> |
			<a href="/publications/publication3601.bib">
			BibTeX  <span class="sr-only" > data for <em> Usability and Security of Out&#x2212;Of&#x2212;Band Channels in Secure Device Pairing Protocols  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[32] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Stakeholder involvement&#x201a; motivation&#x201a; responsibility&#x201a; communication: How to design usable security in e&#x2212;Science </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais and M. A. Sasse  </em> </p>
	
	<p class="publicationDetails"> 
            Vol. 67.
        
            No. 4.
        
                Pages 281&#x2212;296.
            2009.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication899-abstract.html">
			Details <span class="sr-only" > about <em> Stakeholder involvement&#x201a; motivation&#x201a; responsibility&#x201a; communication: How to design usable security in e&#x2212;Science  </em></span> </a> |
			<a href="/publications/publication899.bib">
			BibTeX  <span class="sr-only" > data for <em> Stakeholder involvement&#x201a; motivation&#x201a; responsibility&#x201a; communication: How to design usable security in e&#x2212;Science  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/4414/ijhcs%20preprint.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Stakeholder involvement&#x201a; motivation&#x201a; responsibility&#x201a; communication: How to design usable security in e&#x2212;Science  </em></span>

					    </a>


				     | <a
		href="http://dx.doi.org/10.1016/j.ijhcs.2007.10.002">
		DOI (10.1016/j.ijhcs.2007.10.002)
		</a> 
					| <a href="http://www.sciencedirect.com/science/article/B6WGR-4PV94FB-2/2/81f2861921dabe354e4c684f6202429d"> Link <span class="sr-only" > to <em> Stakeholder involvement&#x201a; motivation&#x201a; responsibility&#x201a; communication: How to design usable security in e&#x2212;Science  </em></span> </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[33] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Making the invisible visible: a theory of security culture for secure and usable grids </strong> </p>
	    <p class="publicationAuthors"> <em> Shamal Faily and Ivan Flechais  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            UK e&#x2212;Science All Hands Conference 2008&#x201a; Edinburgh&#x201a; UK (Oral Presentation)</em>.
        2008.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2690-abstract.html">
			Details <span class="sr-only" > about <em> Making the invisible visible: a theory of security culture for secure and usable grids  </em></span> </a> |
			<a href="/publications/publication2690.bib">
			BibTeX  <span class="sr-only" > data for <em> Making the invisible visible: a theory of security culture for secure and usable grids  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/1110/1057.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Making the invisible visible: a theory of security culture for secure and usable grids  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[34] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Integrating Security and Usability into the Requirements and Design Process </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais&#x201a; C. Mascolo and M. A. Sasse  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Second International Conference on Global E&#x2212;Security</em>.
        2006.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2325-abstract.html">
			Details <span class="sr-only" > about <em> Integrating Security and Usability into the Requirements and Design Process  </em></span> </a> |
			<a href="/publications/publication2325.bib">
			BibTeX  <span class="sr-only" > data for <em> Integrating Security and Usability into the Requirements and Design Process  </em></span>   </a>
			
			
					| <a href="http://www.softeng.ox.ac.uk/personal/Ivan.Flechais/downloads/icges.pdf"> Download (pdf)  <span class="sr-only" > of <em> Integrating Security and Usability into the Requirements and Design Process  </em></span>   </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[35] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Divide and Conquer: The Role of Trust and Assurance in the Design of Secure Socio&#x2212;Technical Systems </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais&#x201a; J. Riegelsberger and M. A. Sasse  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            New Security Paradigms Workshop</em>.
        2005.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2326-abstract.html">
			Details <span class="sr-only" > about <em> Divide and Conquer: The Role of Trust and Assurance in the Design of Secure Socio&#x2212;Technical Systems  </em></span> </a> |
			<a href="/publications/publication2326.bib">
			BibTeX  <span class="sr-only" > data for <em> Divide and Conquer: The Role of Trust and Assurance in the Design of Secure Socio&#x2212;Technical Systems  </em></span>   </a>
			
			
					| <a href="http://www.softeng.ox.ac.uk/personal/Ivan.Flechais/downloads/nspw2005.pdf"> Download (pdf)  <span class="sr-only" > of <em> Divide and Conquer: The Role of Trust and Assurance in the Design of Secure Socio&#x2212;Technical Systems  </em></span>   </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[36] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Bringing Security Home: A Process for Developing Secure and Usable Systems </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais&#x201a; M. A. Sasse and S. M. V. Hailes  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            ACM/SIGSAC New Security Paradigms Workshop</em>.
        2003.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2328-abstract.html">
			Details <span class="sr-only" > about <em> Bringing Security Home: A Process for Developing Secure and Usable Systems  </em></span> </a> |
			<a href="/publications/publication2328.bib">
			BibTeX  <span class="sr-only" > data for <em> Bringing Security Home: A Process for Developing Secure and Usable Systems  </em></span>   </a>
			
			
					| <a href="http://www.softeng.ox.ac.uk/personal/Ivan.Flechais/downloads/nspw2003.pdf"> Download (pdf)  <span class="sr-only" > of <em> Bringing Security Home: A Process for Developing Secure and Usable Systems  </em></span>   </a>
  				
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[37] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Developing Secure and Usable Software </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais and M. A. Sasse  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            OT2003</em>.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2327-abstract.html">
			Details <span class="sr-only" > about <em> Developing Secure and Usable Software  </em></span> </a> |
			<a href="/publications/publication2327.bib">
			BibTeX  <span class="sr-only" > data for <em> Developing Secure and Usable Software  </em></span>   </a>
			
			
					| <a href="http://www.softeng.ox.ac.uk/personal/Ivan.Flechais/downloads/ot2003.pdf"> Download (pdf)  <span class="sr-only" > of <em> Developing Secure and Usable Software  </em></span>   </a>
  				
		
		</div> 
	</div> 
	
        </li></ul><h2>
      Theses
      </h2><ul class="list-unbulleted list-unbulleted-spaced"><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[1] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Designing Secure and Usable Systems </strong> </p>
	    <p class="publicationAuthors"> <em> I. Flechais  </em> </p>
	
	<p class="publicationDetails">  PhD Thesis University College&#x201a; London.
        2005.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication2324-abstract.html">
			Details <span class="sr-only" > about <em> Designing Secure and Usable Systems  </em></span> </a> |
			<a href="/publications/publication2324.bib">
			BibTeX  <span class="sr-only" > data for <em> Designing Secure and Usable Systems  </em></span>   </a>
			
			

				     |
                			<a 
                			    href="http://www.cs.ox.ac.uk/files/6345/thesis_final.pdf">Download
					     (pdf)

					    <span class="sr-only" > of <em> Designing Secure and Usable Systems  </em></span>

					    </a>


				    
		
		</div> 
	</div> 
	
        </li></ul></div><div class="col-xs-12 col-md-3 col-md-pull-9 side-menu-col"><h2 class="side-menu-title text-uppercase"><a href="#">About Us</a></h2><ul class="side-menu"><li class="active mobile-menu-source"><a href="/people/">People</a><ul><li class="active"><a href="/people/faculty.html">Faculty</a></li><li><a href="/people/research.html">Research</a></li><li><a href="/people/students.html">Students</a></li><li><a href="/people/support.html">Professional Services</a></li><li><a href="/people/visitingprofessors.html">Visiting Professors</a></li><li><a href="/people/emeritusfaculty.html">Emeritus Faculty</a></li></ul></li><li><a href="/aboutus/vacancies/">Vacancies</a></li><li><a href="/aboutus/women-cs-oxford/index.html">Women in the department</a></li><li><a href="/aboutus/equality-diversity-inclusion/index.html">Equality, diversity and inclusion</a></li><li><a href="https://www.alumniweb.ox.ac.uk/cs/make-a-donation">Support Us</a></li><li><a href="/aboutus/cshistory.html">Our History</a></li><li><a href="/aboutus/contact.html">Contact Us</a></li></ul></div></div></div>[an error occurred while processing this directive]