Improving Password Security and Usability with Data-Driven Approaches

Blase Ur, CMU

12:30pm Friday, 11 March 2016, ITE325b

Users often must make security and privacy decisions, yet are rarely equipped to do so. In my research, I aim to understand both computer systems and the humans who use them. Armed with this understanding, I design and build tools that help users protect their security and privacy.

In this talk, I will describe how I applied this research approach to password security and usability. As understanding what makes a password good or bad is crucial to this process, I will first discuss our work on metrics for password strength. These metrics commonly involve modeling password cracking, which we found often vastly underestimates passwords’ vulnerability to cracking in the real world. We instead propose combining a series of carefully configured approaches, which we found to conservatively model real-world experts. We used these insights to implement a Password Guessability Service, which is already used by nearly two dozen research groups. I will then discuss our work on another key step to helping users create better passwords: understanding why humans create the passwords they do. I will focus on the impact of password-strength meters and users’ perceptions of password security. By combining better metrics with an understanding of users, I show how we can design tools that guide users toward better passwords.

Blase Ur is a Ph.D. candidate at Carnegie Mellon University’s School of Computer Science, where he is advised by Lorrie Cranor. His research interests lie at the intersection of security, privacy, and human-computer interaction (HCI). In addition to his work on password security, he has studied numerous aspects of online privacy and the Internet of Things (IoT). Previously, he obtained his A.B. in Computer Science from Harvard University. He is the recipient of an NDSEG fellowship, a Fulbright scholarship, a Yahoo Key Scientific Challenges Award, the best paper award at UbiComp 2014, and honorable mentions for best paper at both CHI 2012 and CHI 2016.

St. Patrick’s Day is celebrated on March 17, the saint’s religious feast day and the anniversary of his death in the fifth century. The Irish have observed this day as a religious holiday for over 1,000 years. On St. Patrick’s Day, which falls during the Christian season of Lent, Irish families would traditionally attend church in the morning and celebrate in the afternoon. Lenten prohibitions against the consumption of meat were waived and people would dance, drink and feast–on the traditional meal of Irish bacon and cabbage.

ST. PATRICK AND THE FIRST ST. PATRICK’S DAY PARADE

Saint Patrick, who lived during the fifth century, is the patron saint and national apostle of Ireland. Born in Roman Britain, he was kidnapped and brought to Ireland as a slave at the age of 16. He later escaped, but returned to Ireland and was credited with bringing Christianity to its people. In the centuries following Patrick’s death (believed to have been on March 17, 461), the mythology surrounding his life became ever more ingrained in the Irish culture: Perhaps the most well known legend is that he explained the Holy Trinity (Father, Son and Holy Spirit) using the three leaves of a native Irish clover, the shamrock.

More than 100 St. Patrick's Day parades are held across the United States; New York City and Boston are home to the largest celebrations.

Since around the ninth or 10th century, people in Ireland have been observing the Roman Catholic feast day of St. Patrick on March 17. Interestingly, however, the first parade held to honor St. Patrick’s Day took place not in Ireland but in the United States. On March 17, 1762, Irish soldiers serving in the English military marched through New York City. Along with their music, the parade helped the soldiers reconnect with their Irish roots, as well as with fellow Irishmen serving in the English army.

ST. PATRICK’S DAY, NO IRISH NEED APPLY AND THE “GREEN MACHINE”

Up until the mid-19th century, most Irish immigrants in America were members of the Protestant middle class. When the Great Potato Famine hit Ireland in 1845, close to 1 million poor and uneducated Irish Catholics began pouring into America to escape starvation. Despised for their alien religious beliefs and unfamiliar accents by the American Protestant majority, the immigrants had trouble finding even menial jobs. When Irish Americans in the country’s cities took to the streets on St. Patrick’s Day to celebrate their heritage, newspapers portrayed them in cartoons as drunk, violent monkeys.

The American Irish soon began to realize, however, that their large and growing numbers endowed them with a political power that had yet to be exploited. They started to organize, and their voting block, known as the “green machine,” became an important swing vote for political hopefuls. Suddenly, annual St. Patrick’s Day parades became a show of strength for Irish Americans, as well as a must-attend event for a slew of political candidates. In 1948, President Harry S. Truman attended New York City‘s St. Patrick’s Day parade, a proud moment for the many Irish Americans whose ancestors had to fight stereotypes and racial prejudice to find acceptance in the New World.

THE CHICAGO RIVER ON ST. PATRICK’S DAY

As Irish immigrants spread out over the United States, other cities developed their own traditions. One of these is Chicago’s annual dyeing of the Chicago River green. The practice started in 1962, when city pollution-control workers used dyes to trace illegal sewage discharges and realized that the green dye might provide a unique way to celebrate the holiday. That year, they released 100 pounds of green vegetable dye into the river–enough to keep it green for a week! Today, in order to minimize environmental damage, only 40 pounds of dye are used, and the river turns green for only several hours.

Although Chicago historians claim their city’s idea for a river of green was original, some natives of Savannah, Georgia (whose St. Patrick’s Day parade, the oldest in the nation, dates back to 1813) believe the idea originated in their town. They point out that, in 1961, a hotel restaurant manager named Tom Woolley convinced city officials to dye Savannah’s river green. The experiment didn’t exactly work as planned, and the water only took on a slight greenish hue. Savannah never attempted to dye its river again, but Woolley maintains (though others refute the claim) that he personally suggested the idea to Chicago’s Mayor Richard J. Daley.

ST. PATRICK’S DAY AROUND THE WORLD

Today, people of all backgrounds celebrate St. Patrick’s Day, especially throughout the United States, Canada and Australia. Although North America is home to the largest productions, St. Patrick’s Day is celebrated in many other locations far from Ireland, including Japan, Singapore and Russia.

In modern-day Ireland, St. Patrick’s Day was traditionally been a religious occasion. In fact, up until the 1970s, Irish laws mandated that pubs be closed on March 17. Beginning in 1995, however, the Irish government began a national campaign to use interest in St. Patrick’s Day to drive tourism and showcase Ireland and Irish culture to the rest of the world. Today, approximately 1 million people annually take part in Ireland‘s St. Patrick’s Festival in Dublin, a multi-day celebration featuring parades, concerts, outdoor theater productions and fireworks shows.

Source: The History of St. Patrick's Day, history.com

Want to learn more? Check out this St. Patrick's Day, Bet You Didn't Know YouTube Video: https://youtu.be/CXmxooGQ_Dg

Thumbnail image courtesy of Heavypong at FreeDigitalPhotos.net

The White House

Office of the Press Secretary

For Immediate Release February 29, 2016

Presidential Proclamation -- Irish-American Heritage Month, 2016

IRISH-AMERICAN HERITAGE MONTH, 2016

- - - - - - -

BY THE PRESIDENT OF THE UNITED STATES OF AMERICA

A PROCLAMATION

Hailing from the Emerald Isle, generations of Irishmen and women have helped shape the idea of America, overcoming hardship and strife through strength and sacrifice, faith and family. With an undying belief that tomorrow always yields a brighter day, Irish Americans symbolize the perpetual optimism that defines our country, and they have long embodied the truth at the heart of our promise -- that no matter who you are or where you come from, in America, you can make it if you try.

As we celebrate Irish-American Heritage Month, we recognize the Irish people's contributions to our country's dynamism, and we reaffirm the friendship and family ties between our two nations. For centuries, sons and daughters of Erin have come to America's shores, adding to our rich vibrancy and putting their full hearts into everything they do. From building our country's cities as preeminent architects and earnest laborers to building our national character as people of great joy and cherished culture, Irish Americans have endured intolerance and discrimination to find a place for themselves and their children here in the United States. While remembering the great Irish Americans of the past, we celebrate what forms the foundation of the lasting Irish-American story -- a shared embrace of hard work and humility, fairness and dignity, and a mutual quest to secure a freer and more peaceful future.

Today, the United States and Ireland enjoy a thriving and cooperative bond buoyed by a strong legacy of exchanges between our peoples. During Irish-American Heritage Month, let us pay tribute to the extraordinary mark Irish Americans have made on our Nation, and let us look forward to continued collaboration, friendship, and partnership between our countries.

NOW, THEREFORE, I, BARACK OBAMA, President of the United States of America, by virtue of the authority vested in me by the Constitution and the laws of the United States, do hereby proclaim March 2016 as Irish-American Heritage Month. I call upon all Americans to observe this month with appropriate ceremonies, activities, and programs.

IN WITNESS WHEREOF, I have hereunto set my hand this twenty-ninth day of February, in the year of our Lord two thousand sixteen, and of the Independence of the United States of America the two hundred and fortieth.

BARACK OBAMA

March is Women’s History Month!

Three  years ago Women’s History Month’s national theme was “Women Inspiring Innovation Through Imagination: Celebrating Women in Science, Technology, Engineering and Mathematics.” The theme honored generations of women who throughout American history have used their intelligence, imagination, sense of wonder, and tenacity to make extraordinary contributions to the STEM fields. At UMBC we honored this theme by partnering with the Center for Women in Technology (CWIT) to feature some of their amazing students participating in technology in the engineering and information technology fields. While the theme for Women’s History Month changes every year, we have come to love the tradition in spotlighting the stories of UMBC’s CWIT women. So with that, we are honored to bring you the 3rd Annual CWIT Showcase in honor of Women’s History Month.

* * * * * * * * * * * * * * * 

Elyse Hill
Mechanical Engineering
CWIT  Scholar

Meet Elyse Hill! A CWIT Scholar and mechanical engineering major.

Describe what sparked your interest STEM and the journey to choosing your major.

Women often face subtle comments (microaggressions) or people who tell them they can’t/shouldn’t be in these majors which are often dominated by men. What would you say to those women or what advice do you have?

To people who have faced microaggressions, my best advice is to be wary of the comments. There are times to challenge the microaggressions, and there are times to let them slide and keep moving on with your life. Sometimes, it’s necessary to challenge what someone else is saying about you. Don’t let someone else get away with hurting your feelings or putting you down because, as my mom always said, “No one can hurt you unless you let them.” In addition, challenging such commentary can be a great learning experience for all those involved. However, there are also times when you don’t need to fight all battles. Sometimes, it’s just not worth it, especially when the person (or people) talking to you will never be able to learn from the experience of addressing the issue. So I say, take the commentary in stride, but don’t let it in any way diminish you or your outlook on your choices in life.

With viral hashtags like #DistractinglySexy or #AddWomen and #Ilooklikeanengineer, women in STEM are using social media as a tool for activism and creating awareness about women’s representation in STEM. What’s your favorite example of women in STEM supporting and empowering themselves and other women to change the narrative about women in STEM?

Elyse giving the thumbs up for her #ILookLookanEngineer shot!

Social media is my favorite example of women in STEM supporting one another. Things like Twitter and Facebook are great ways for the masses to react when something big happens on the internet. For example, Tim Hunt’s comments sparked #DistractinglySexy which led large numbers of females in science to latch onto the hashtag and post about their own lives. I think a community’s reaction to something is the most important part about the world we live in because it gives that community the chance to become visible. Who would have even pictured all the women who would respond with the #DistractinglySexy tag? To those women, they were just living their everyday lives until the whole thing blew up, allowing them a chance to share what they do with the world. Now we all know their stories, which can be seen as inspiration to some. As long as these tags keep themselves going, people’s perspective of the STEM field will expand and illustrate that women can be just as capable and present in these fields as men.

 

* * * * * * * * * * * * * * * 

The Center for Women In Technology (CWIT) is dedicated to increasing the representation of women in the creation of technology in the engineering and information technology fields. CWIT efforts begin with nurturing a strong group of Scholars, grow to building community resources for other women in these majors, extend to fostering a healthy gender climate and ITE pedagogy in College of Engineering and Information Technology (COEIT) departments, and finally expand into outreach efforts to increase interest in technical careers. A successful program for female-friendly engineering and information technology education at UMBC will help make UMBC a destination for women (and men) interested in technical careers and serve as a national model for other universities. To read previous Women’s History Month CWIT spotlights, click here. 

To learn more about the experience of women in STEM, check out the American Association of University Women’s report, Why So Few? Women in Science, Technology, Engineering, and Mathematics (STEM) which presents in-depth yet accessible profiles of eight key research findings that point to environmental and social barriers — including stereotypes, gender bias, and the climate of science and engineering departments in colleges and universities — that continue to block women’s progress in STEM.

* * * * * * * * * * * * * * * 

For more information about Women’s History events and happenings, visit the Women’s Center myUMBC group page.

The Shriver Center coordinates this undergraduate scholarship program, funded by the France-Merrick Foundation. After 20 years, this scholarship remains available for students who demonstrate an exemplary commitment to service, leadership, and civic engagement on the UMBC campus and in Baltimore City.   The France-Merrick Scholarship Program seeks to combine service and reflection, build relationships, and strengthen networks to affect meaningful change.

Fellows are awarded a scholarship that goes towards tuition, mandatory fees, and room and board expenses.  This will not exceed $15,000 for Maryland students, $22,000 for out-of-state students.  In 2015-16, Fellows will engage in service connected with Baltimore City;  serve in leadership roles (which includes convening meetings for the France-Merrick Scholarship Program), support meaningful professional development, and serve as ambassadors of service at UMBC.  For 2016-17, two Fellows will be selected.

Scholars are awarded a scholarship of up to $1,500.  In 2015-16, Scholars will engage in service connected with Baltimore City, support meaningful professional development, participate in meetings, and serve as ambassadors of service at UMBC.  For 2016-17, five Scholars will be selected.

Applications for the 2016-17 cohort are NOW available on-line.  The Application Timeline is:

Monday, March 7, 2016 – On-line applications open 

Monday, April 4, 2016 – Applications will close at 5 pm

Monday, April 18 – Friday, April 22, 2016 – Selected students invited for interviews

Monday, April 25, 2016 – Recipients notified