Although cryptography is an essential component of modern computing, implementing cryptography correctly is a non-trivial undertaking, often resulting in developers making errors and introducing vulnerabilities into their cryptographic products.
Our cryptographic research is concerned with creating a baseline understanding of the practices and challenges of organizations that are developing products that use cryptography. This new understanding can help improve the assurance of cryptographic tools and the usability of cryptographic resources, such as standards and libraries.
Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs – Julie Haney, Mary Theofanos, Yasemin Acar, & Sandra S. Prettyman. NISTIR 8241 (2018)
"We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products – Julie M. Haney, Mary F. Theofanos, Yasemin Acar & Sandra S. Prettyman. Proceedings of the Symposium on Usable Privacy and Security (SOUPS) (2018).
Organizational Practices in Cryptographic Development and Testing – Julie M. Haney, Simson L. Garfinkel, & Mary F. Theofanos. Proceedings of the IEEE Conference on Communications and Network Security (CNS) (2017).
Crypto Reading Club 2021-12-15: "We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products - Julie Haney (2021)
Usability and Key Management – Mary Theofanos (Jun 8, 2009)
Security and Privacy: authentication, behavior, cryptography, general security & privacy, privacy, security programs & operations, usability
Applications: cybersecurity education, cybersecurity workforce, Internet of Things, voting