Towards Usable Security Analysis Tools for Trigger-Action Programming
summary
Study evaluates usable security techniques for trigger-action programming by testing 447 Prolific users on writing declarative policies vs anti-patterns using templates and examples. Tools evaluated include template-based policy checks and anti-pattern detectors; participants split across two surveys (174 and 273). Results show wide variation: some scenarios hit 91–97% correct template use while other scenarios produce near-zero success, and many users do not see tool-flagged anti-patterns as undesirable. Data and materials are published with the paper.
AI-written summary · about
chapters (7)
- 0:00Usable home automation security
- 2:38Trigger-action security risks
- 4:25Smart home security tools
- 6:09Tool usability study design
- 8:57Policy template comprehension
- 11:23Policy writing gaps
- 12:52Future research directions
related talks
46mSecurity Design Anti-Patterns – Creating Awareness to Limit Security Debt
30mTopics of Interest: Effective Usage Analysis: The Shortest Path Between a Developer ...
38mHow to read a PL-security paper
50mThreat Modeling With Architectural Risk Patterns
49mPragmatic Approaches To Building Secure Software
44mSecurity Lessons for Early Adopters
40mDesign Approaches for Security Automation
40mState of (Absolute) AppSec
