{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T06:01:58Z","timestamp":1771480918424,"version":"3.50.1"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031430329","type":"print"},{"value":"9783031430336","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-43033-6_21","type":"book-chapter","created":{"date-parts":[[2023,10,21]],"date-time":"2023-10-21T05:01:47Z","timestamp":1697864507000},"page":"211-219","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Towards Human-Centric Endpoint Security"],"prefix":"10.1007","author":[{"given":"Jenny","family":"Blessing","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Partha Das","family":"Chowdhury","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maria","family":"Sameen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ross","family":"Anderson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joseph","family":"Gardiner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,10,21]]},"reference":[{"key":"21_CR1","unstructured":"Ventura, V.: in(Secure) messaging apps - how side-channel attacks can compromise privacy in WhatsApp, Telegram, and Signal. https:\/\/blog.talosintelligence.com\/2018\/12\/secureim.html"},{"key":"21_CR2","unstructured":"Akgul, O., Bai, W., Das, S., Mazurek, M.L.: Evaluating $$\\{$$In-Workflow$$\\}$$ messages for improving mental models of $$\\{$$End-to-End$$\\}$$ encryption. In: 30th USENIX Security Symposium (USENIX Security 21), pp. 447\u2013464 (2021)"},{"key":"21_CR3","unstructured":"BBC: Moxie Marlinspike leaves encrypted-messaging app Signal. https:\/\/www.bbc.co.uk\/news\/technology-59937614"},{"key":"21_CR4","doi-asserted-by":"crossref","unstructured":"Ceci, J., Stegman, J., Khan, H.: No privacy in the electronics repair industry. arXiv preprint arXiv:2211.05824 (2022)","DOI":"10.1109\/SP46215.2023.10179413"},{"key":"21_CR5","unstructured":"Chowdhury, P.D., Hern\u00e1ndez, A.D., Ramokapane, M., Rashid, A.: From utility to capability: a new paradigm to conceptualize and develop inclusive pets. In: New Security Paradigms Workshop. Association for Computing Machinery (ACM) (2022)"},{"key":"21_CR6","unstructured":"Chowdhury, P.D., et al.: Threat models over space and time: a case study of E2EE messaging applications. arXiv preprint arXiv:2301.05653 (2023)"},{"key":"21_CR7","unstructured":"Howell, C., Leavy, T., Alwen, J.: Wickr messaging protocol technical paper. https:\/\/wickr.com\/wp-content\/uploads\/2019\/12\/WhitePaper_WickrMessagingProtocol.pdf"},{"key":"21_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1007\/10720107_8","volume-title":"Security Protocols","author":"Bruce Christianson","year":"2000","unstructured":"Christianson, Bruce: Auditing against impossible abstractions. In: Christianson, Bruce, Crispo, Bruno, Malcolm, James A.., Roe, Michael (eds.) Security Protocols 1999. LNCS, vol. 1796, pp. 60\u201364. Springer, Heidelberg (2000). https:\/\/doi.org\/10.1007\/10720107_8"},{"key":"21_CR9","doi-asserted-by":"crossref","unstructured":"Cremers, C., Fairoze, J., Kiesl, B., Naska, A.: Clone detection in secure messaging: improving post-compromise security in practice. In: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, pp. 1481\u20131495 (2020)","DOI":"10.1145\/3372297.3423354"},{"key":"21_CR10","unstructured":"Cremers, C., Jacomme, C., Naska, A.: Formal analysis of session-handling in secure messaging: lifting security from sessions to conversations. In: Usenix Security (2023)"},{"key":"21_CR11","unstructured":"Element: matrix specification. https:\/\/element.io\/enterprise\/end-to-end-encryption"},{"key":"21_CR12","unstructured":"Hu, H., Wang, G.: $$\\{$$End-to-End$$\\}$$ measurements of email spoofing attacks. In: 27th USENIX Security Symposium (USENIX Security 18), pp. 1095\u20131112 (2018)"},{"key":"21_CR13","unstructured":"Levy, I., Robinson, C.: Principles for a more informed exceptional access debate. https:\/\/www.lawfareblog.com\/principles-more-informed-exceptional-access-debate"},{"key":"21_CR14","unstructured":"Albrecht, M.R., Celi, S., Dowling, B., Jones, D.: Practically-exploitable cryptographic vulnerabilities in matrix. https:\/\/nebuchadnezzar-megolm.github.io\/static\/paper.pdf"},{"key":"21_CR15","unstructured":"Matrix: upgrade now to address E2EE vulnerabilities in matrix-JS-SDK, matrix-IOS-SDK and matrix-android-sdk2. https:\/\/matrix.org\/blog\/2022\/09\/28\/upgrade-now-to-address-encryption-vulns-in-matrix-sdks-and-clients"},{"key":"21_CR16","unstructured":"Paterson, K.G., Scarlata, M., Truong, K.T.: Three lessons from threema: analysis of a secure messenger"},{"issue":"5","key":"21_CR17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s42979-022-01239-1","volume":"3","author":"K Renaud","year":"2022","unstructured":"Renaud, K., Coles-Kemp, L.: Accessible and inclusive cyber security: a nuanced and complex challenge. SN Comput. Sci. 3(5), 1\u201314 (2022)","journal-title":"SN Comput. Sci."},{"issue":"3","key":"21_CR18","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/MSP.2015.65","volume":"13","author":"A Sasse","year":"2015","unstructured":"Sasse, A.: Scaring and bullying people into security won\u2019t work. IEEE Secur. Priv. 13(3), 80\u201383 (2015)","journal-title":"IEEE Secur. Priv."},{"key":"21_CR19","unstructured":"Lawlor, S., Lewi, K.: Deploying key transparency at WhatsApp. https:\/\/engineering.fb.com\/2023\/04\/13\/security\/whatsapp-key-transparency\/"},{"key":"21_CR20","unstructured":"Signal community forum: vulnerabilities. https:\/\/community.signalusers.org\/t\/vulnerabilities\/4548\/7"},{"key":"21_CR21","unstructured":"Signal-desktop GitHub: add option to lock the application. https:\/\/github.com\/signalapp\/Signal-Desktop\/issues\/452#issuecomment-162622211"},{"key":"21_CR22","unstructured":"Signal-Desktop GitHub: all exported data (messages + attachments) are *NOT* encrypted on disk during (and after) the upgrade process! https:\/\/github.com\/signalapp\/Signal-Desktop\/issues\/2815#issuecomment-433556965"},{"key":"21_CR23","unstructured":"Signal-Desktop GitHub: based upon Kevinsbranch encrypted key in config.json using cryptojs & & start performance fix. https:\/\/github.com\/signalapp\/Signal-Desktop\/pull\/5465#issuecomment-923300524"},{"key":"21_CR24","unstructured":"Telegram: MTProto Mobile Protocol. https:\/\/core.telegram.org\/mtproto\/description"},{"key":"21_CR25","unstructured":"The Matrix.org Foundation: \u201cClient-Server API (unstable), May 2021\u201d. https:\/\/spec.matrix.org\/unstable\/client-server-api\/"},{"key":"21_CR26","unstructured":"Threema: Version history. https:\/\/threema.ch\/en\/versionhistory"},{"key":"21_CR27","unstructured":"UK Parliament: Online Safety Bill. https:\/\/bills.parliament.uk\/bills\/3137"},{"key":"21_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/978-3-030-57043-9_23","volume-title":"Security Protocols XXVII","author":"Diana A. Vasile","year":"2020","unstructured":"Vasile, Diana A.., Kleppmann, Martin, Thomas, Daniel R.., Beresford, Alastair R..: Ghost trace on the wire? Using key evidence for informed decisions. In: Anderson, Jonathan, Stajano, Frank, Christianson, Bruce, Maty\u00e1\u0161, Vashek (eds.) Security Protocols 2019. LNCS, vol. 12287, pp. 245\u2013257. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-57043-9_23"},{"key":"21_CR29","unstructured":"Vaziripour, E., et al.: Is that you, alice? a usability study of the authentication ceremony of secure messaging applications. In: Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017), pp. 29\u201347 (2017)"},{"key":"21_CR30","unstructured":"Viber: Viber Encryption Overview. https:\/\/www.viber.com\/app\/uploads\/viber-encryption-overview.pdf"},{"key":"21_CR31","unstructured":"Wu, J., et al.: Something isn\u2019t secure, but i\u2019m not sure how that translates into a problem: promoting autonomy by designing for understanding in signal. In: Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019), pp. 137\u2013153 (2019)"},{"key":"21_CR32","first-page":"373","volume":"3","author":"Y Yang","year":"2022","unstructured":"Yang, Y., West, J., Thiruvathukal, G.K., Klingensmith, N., Fawaz, K.: Are you really muted?: a privacy analysis of mute buttons in video conferencing apps. Proceed. Priv. Enhan. Technol. 3, 373\u2013393 (2022)","journal-title":"Proceed. Priv. Enhan. Technol."}],"container-title":["Lecture Notes in Computer Science","Security Protocols XXVIII"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-43033-6_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,21]],"date-time":"2023-10-21T05:03:34Z","timestamp":1697864614000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-43033-6_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031430329","9783031430336"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-43033-6_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"21 October 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Security Protocols","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cambridge International Workshop on Security Protocols","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cambridge","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 March 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 March 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"spw2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.cl.cam.ac.uk\/events\/spw\/2023\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"CMT3","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"13","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"57% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}