BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Talks.cam//talks.cam.ac.uk//
X-WR-CALNAME:Talks.cam
BEGIN:VEVENT
SUMMARY:women@CL Talklets - Security  - Jeunese Payne\, Alice Hutchings an
 d Sophie Van Der Zee\, Computer Laboratory\, University of Cambridge
DTSTART:20141204T130000Z
DTEND:20141204T140000Z
UID:TALK55019@talks.cam.ac.uk
CONTACT:Noa Zilberman
DESCRIPTION:Three talklets by security group members:\n\nTitle: Pico Proje
 ct: Current Research into Pico Usability\n\nSpeaker: Jeunese Payne\n\nAbst
 ract: \nThe weaknesses of passwords as an authentication scheme have not b
 een detrimental to their ubiquity. This is not because passwords are more 
 usable\, but because they are easy to administer\, well understood by both
  users and administers\, and require no additional hardware or software. P
 ico\, on the other hand\, is not currently easy to administer\, is not wid
 ely understood\, and does require additional hardware and software. Our re
 search aims to determine how we can improve the deployability of Pico\, an
  obstacle not currently faced by passwords. This is a particular challenge
  because we are not only challenging passwords as they are supposed to be 
 used\, but as they are actually used\, which is arguably more usable\, tho
 ugh much less secure\, than our current conception of Pico. Several lines 
 of research in progress are currently being conducted to answer questions 
 about this issue of usability.\n\n\nTitle: A crime script analysis of the 
 online stolen data market\n\nSpeaker: Alice Hutchings\n\nAbstract: \nThe p
 urpose of this study is to better understand the online black market econo
 my\, specifically relating to stolen data\, using crime script analysis. C
 ontent analysis of 13 English and Russian-speaking stolen data forums foun
 d that the different products and services offered enabled the commodifica
 tion of stolen data. The marketplace offers a range of complementary produ
 cts\, from the supply of hardware and software to steal data\, the sale of
  the stolen data itself\, to the provision of services to turn data into m
 oney\, such as drops\, cashiers and money laundering. The crime script ana
 lysis provides some insight into how the actors in these forums interact\,
  and the actions they perform\, from setting up software to finalising tra
 nsactions and exiting the marketplace.\n\n\nTitle: How transparency can he
 lp decrease insurance fraud\n\nSpeaker: Sophie Van Der Zee\n\nAbstract: Fr
 aud is a pervasive and challenging problem that costs society large amount
 s of money. By no means all of it is committed by ‘professional criminal
 s’: much is committed by ordinary people who indulge in small-scale oppo
 rtunistic deception. \nPrevious research has shown that perceptions of unf
 airness can give rise to dishonest feelings\, intentions and behavior\; ma
 ny fiddles are done by firms’ customers or \nemployers ‘getting their 
 own back’. However\, it is still unknown exactly how violations of fairn
 ess can cause dishonest behavior. In two studies we demonstrate that peopl
 e do indeed behave more dishonestly when treated unfairly\, and that this 
 effect of fairness is larger than not wanting to ‘miss out’: although 
 rejected insurance claims in general led to dishonest behavior\, this effe
 ct was larger when claims were rejected unfairly. We subsequently measured
  whether dishonesty was driven by the financial loss associated with rejec
 tion\, or emotional factors such as a desire for revenge. We found that re
 jected subjects were just as dishonest when their cheating led to financia
 l gain as when there were no financial benefits. However\, they felt\nstro
 nger emotions when there was no money involved\, suggesting that when fair
 ness principles are violated\, emotional involvement drives dishonest beha
 vior more strongly than a rational cost-benefit analysis. We suggest that 
 firms wishing to deter customers and employees from committing fraud shoul
 d first of all treat them fairly\, and secondly provide an effective means
  of complaint\, so that people have a legitimate target 
LOCATION:Computer Laboratory\, William Gates Building\, Room FW26
END:VEVENT
END:VCALENDAR