Závěrečná práce: Bc. Matěj Grabovský: Usability analysis of TLS API documentation
Diplomová práce
Usability analysis of TLS API documentation
Anotace
Tato práce se zabývá použitelností vybraných knihoven s podporou TLS, jejich dokumentace, ukázek použití a souvisejících zdrojů. Popisujeme design a výsledky prvotní explorační studie a navazující studie provedené se studenty Fakulty informatiky. Naše výsledky ukazují, že dokumentace vybraných knihoven trpí mnohými problémy, jež, ač nejsou jedinečné pro oblast TLS, mohou mít v této oblasti vážnější …více
Abstract
This thesis deals with the usability of selected TLS libraries, their documentation, code samples and related resources. We describe the design and results of our initial exploratory study and a follow-up study, both performed with students of the Faculty of Informatics. The results show that the selected libraries' documentation suffers from many usability problems. Although these issues are not specific …více
Zadání práce
The thesis aims to evaluate TLS-related documentation in multiple libraries. The student will design and conduct an empirical experiment comparing documentation of at least two commonly used TLS-enabled libraries. The experiment should have at least 30 participants and should be administered at the Faculty of Informatics MU (with the assistance of the supervisor).
The subsequent analyses of the obtained results should provide basic quantitative information on the participant sample, quantitative measures on perceived documentation issues as well as qualitative data hinting at causes behind these issues. The results should both assess the documentation overall and compare the documentation of the selected libraries. The results should answer some of the following questions:
- Do developers perceive any issues in the TLS API documentation?
- What prevents developers from using the TLS API documentation effectively and efficiently?
- What issues are perceived as more severe/pressing?
- How do multiple TLS libraries compare with respect to the usability of its documentation?
All phases of the experiment (its design, run and analysis) should follow a proper methodology of scientific works.
20. 7. 2020 18:31, RNDr. Martin Ukrop, Ph.D., učo 374297
- Zadáno/změněno 15. 9. 2020 16:39, Helena Kryštofová
- Záznam založen 30. 4. 2020 12:29, Jana Zemanová, učo 9619
- Zveřejnit od 20. 7. 2020 12:01, Helena Kryštofová
- Práce převzata 20. 7. 2020 12:01, Helena Kryštofová
Vedoucí
Literatura
- UKROP, Martin a Václav MATYÁŠ. Why Johnny the Developer Can't Work with Public Key Certificates: An Experimental Study of OpenSSL Usability. In Nigel P. Smart. Topics in Cryptology – CT-RSA 2018: The Cryptographers' Track at the RSA Conference 2018. Švýcarsko: Springer International Publishing, 2018, s. 45-64. ISBN 978-3-319-76952-3. Dostupné z: https://doi.org/10.1007/978-3-319-76953-0_3.
- ACAR, Yasemin; Michael BACKES; Sascha FAHL; Christian STRANSKY; Simson GARFINKEL; Doowon KIM a Michelle L. MAZUREK. Comparing the Usability of Cryptographic APIs. 2017 IEEE Symposium on Security and Privary (S&P). New York: IEEE, 2017, s. 154-171. ISSN 1081-6011. Dostupné z: https://doi.org/10.1109/SP.2017.52.
- ACAR, Yasemin; Michael BACKES; Sascha FAHL; Christian STRANSKY; Doowon KIM a Michelle L MAZUREK. You Get Where You're Looking For The Impact of Information Sources on Code Security. 2016 IEEE Symposium on Security and Privacy (S&P). New York: IEEE, 2016, s. 289-305. ISSN 1081-6011. Dostupné z: https://doi.org/10.1109/SP.2016.25.
Práce na příbuzné téma
Seznam prací, které mají shodná klíčová slova.
-
Measuring the usability of cryptographic libraries
Mgr. Matěj Kolouch Grabovský -
On selected end-user issues in usable security
RNDr. Vlasta Bukačová, Ph.D., učo 256169 -
Two Cases of Human-Centered Computer Science: Usable Developer Interaction with TLS Certificates and Effective Teaching Assistant Training
RNDr. Martin Ukrop, Ph.D., učo 374297 -
On selected end-user issues in usable security
RNDr. Vlasta Bukačová, Ph.D., učo 256169 -
Investigating certificate revocation options
Ing. Marián Svitek -
Comparing X.509 certificate validation errors across TLS libraries
Mgr. Pavol Žáčik -
Usable documentation for certificate validation errors
Mgr. Michaela Balážová -
NFC and digital identity in m-banking environment
RNDr. Agáta Kružíková, Ph.D.




