Description
People often find it difficult to understand security mechanism because they do not see the reasons for certain design decisions. To understand them, one has to anticipate how protocols fail if certain elements are not in place or not correctly enforced.
The objective of this thesis is to develop, evaluate and document an interactive demonstrator for a selected security protocol, which tries to overcome this difficulty: Users should be able to interactively deactivate or skip parts of the protocol (of introduce failures). If they do so, the resulting attack vector should be illustrated. The target audience for the demonstrator are generally educated citizens, not (only) computer specialists.
This thesis can be assigned to a team of students who develop a common technical framework and visual language. Each student then implements and documents a different protocol (e.g., TLS and Signal).