Intro Flashcards
1
Q
Usable Security
A
Make it easy to do the right thing, hard to do the wrong thing, easy to recover from doing the wrong thing
2
Q
Modern security problem
A
Adverserial setting between security designers and developers
3
Q
Developer friendly design
A
Easy to use APIs (high usability)
4
Q
10 princables for api design
A
- integrate crypto into standard api
- satisfy security and non security requirements
- easy to learn
- dont break paradigm
- easy to use without docs
- hard to missuse
- defaults are safe and not ambigous
- testing and dev mode
- updateable
- assist with end user interaction
