<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.E-MailFormatvorlage18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="DE-AT">Extended DL 22.05<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">[Apologies for cross-posting]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">-----------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">+++ CALL FOR PAPERS +++<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* Workshop on Insecure Interfaces – Learning from User Interfaces that lead to Circumvention of Organizational Information Security Policies (<a href="http://cups.cs.cmu.edu/soups/2014/workshops/insecure.html">http://cups.cs.cmu.edu/soups/2014/workshops/insecure.html</a>)
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* Co-located at SOUPS 2014 – July 9-11, 2014, Menlo Park, CA (<a href="http://cups.cs.cmu.edu/soups/2014/">http://cups.cs.cmu.edu/soups/2014/</a>)
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">-----------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">IMPORTANT DATES<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* NEW Submission deadline: May <span style="color:#1F497D">
</span><span style="color:black">22</span>, 2014<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* Notification of acceptance: May 30, 2014<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* Camera-ready submission deadline: June 13, 2014<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">SCOPE AND FOCUS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">We aim to bring together researchers and practitioners from different disciplines to create, explore, evaluate, and discuss cases for weaknesses in organizational security resulting from user interface and usability considerations.
From these cases, we will derive anti-patterns, anti-guidelines, and anti-heuristics to apply the “learn from mistakes” approach, which can lead to better UI design practice in the area of corporate information security.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Employee compliance with information security policies is critical for companies. Breaches of information security caused by employees can have a range of negative consequences. Critical and sensitive information may
be compromised, potentially harming customers and employees, benefitting competitors, inviting legal and regulatory challenges, and damaging the reputation of the company.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">In the realm of information security policies, it is typically advocated that all business information technology be designed in a way that enables and promotes employee compliance with the employer’s information security
policies. User Interfaces play a critical role in communicating security policies and ensuring employee compliance.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">This workshop, however, turns this design practice around. Similar to the previous workshop “A Turn for the Worse: Trustbusters for User Interfaces” at SOUPS 2013, we aim to “learn from mistakes” and will explore examples
of user interfaces in enterprise systems that lead employees to circumvent security policies and undermine the company’s information security. A deeper understanding of factors that underlie circumvention and non-compliance with official security guidance
can then be applied to “make interfaces better”.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">SUBMISSIONS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">We invite original papers in PDF format describing/providing examples in which security is undermined by interface and usability aspects, including:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* a position, research, or anecdotal paper on use of a design that leads to circumvention of corporate security policies,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* screenshots of design(s) leading to circumvention of official security policies, or<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">* videos or audio material that demonstrate how interface design and usability aspects could weaken corporate information security.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Papers should use the SOUPS formatting template (LaTeX or MS Word). Submissions should be 2 to 4 pages in length, excluding appendices. The paper should be self-contained without requiring readers to read the appendices.
The appendices need not conform to the formatting template. Submissions should not be anonymized. Supplemental material such as screenshots and videos should be made available in downloadable format. Accepted submissions will not be considered archival. Authors
may choose whether to include the full paper or only the abstract on the Workshop Web site.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Inquiries can be emailed to: <a href="mailto:marc.busch@ait.ac.at">
marc.busch@ait.ac.at</a> </span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Please email submissions to: <a href="mailto:marc.busch@ait.ac.at">
marc.busch@ait.ac.at</a> (Note: There is a 10MB size limit on email attachments; for larger submissions, please provide a link to downloadable content.)</span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">ORGANIZERS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Marc Busch & Christina Hochleitner<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">AIT Austrian Institute of Technology GmbH,
<a href="mailto:marc.busch@ait.ac.at">marc.busch@ait.ac.at</a> & <a href="mailto:christina.hochleitner@ait.ac.at">
christina.hochleitner@ait.ac.at</a> </span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">&</span><span lang="DE-AT"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">CURE – Center for Usability Research & Engineering<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">(busch,hochleitner)@cure.at<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Manfred Tscheligi <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">ICT&S Center, University of Salzburg, </span>
<span lang="DE-AT"><a href="mailto:manfred.tscheligi@sbg.ac.at"><span lang="EN-GB">manfred.tscheligi@sbg.ac.at</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">&<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">AIT Austrian Institute of Technology GmbH,
<a href="mailto:manfred.tscheligi@ait.ac.at">manfred.tscheligi@ait.ac.at</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Sameer Patil<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Helsinki Institute for Information Technology HIIT / Aalto University<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"><a href="mailto:sameer.patil@hiit.fi">sameer.patil@hiit.fi</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">Jean Camp<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT">School of Informatics and Computing, Indiana University<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"><a href="mailto:ljcamp@indiana.edu">ljcamp@indiana.edu</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:DE">MARC BUSCH<br>
</span></b><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE">Scientist<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE">Innovation Systems Department<br>
Business Unit Technology Experience</span><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7B8287;mso-fareast-language:DE"><br>
</span><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:DE"><br>
</span><b><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE">AIT Austrian Institute of Technology GmbH</span></b><b><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7B8287;mso-fareast-language:DE"><br>
</span></b><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE">Business Park Marximum
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE">Modecenterstrasse 17/Object 2 | 1110 Vienna | Austria<br>
T +43 50550-4535 | M +43 664 88964935 | F +43 50550-4599<br>
<u><a href="mailto:marc.busch@ait.ac.at">marc.busch@ait.ac.at</a></u> | </span><span style="font-family:"Arial","sans-serif";color:#7C8388;mso-fareast-language:DE"><a href="http://www.ait.ac.at"><span lang="EN-US" style="color:#7C8388">http://www.ait.ac.at</span></a></span><u><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#0000FE;mso-fareast-language:DE"><br>
</span></u><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#7F7F7F;mso-fareast-language:DE"><br>
</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#BEBEBE;mso-fareast-language:DE">FN: 115980 i HG Wien | UID: ATU14703506<br>
<u><a href="http://www.ait.ac.at/Email-Disclaimer"><span style="color:#BEBEBE">www.ait.ac.at/Email-Disclaimer</span></a></u></span><span lang="EN-US" style="font-family:"Arial","sans-serif";color:#C0504D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <o:p></o:p></span></p>
</div>
</body>
</html>