Search

Idag används vanligtvis lösenord som autentiseringsmetod i moderna applikationer. Men allt fler företag och applikationer övergår från denna metod och i stället använda krypterade nycklar och certifikat för att öka säkerheten. Dessutom har telefoner och datorer utvecklats som har hårdvarusäkerhetsmoduler för att lagra och skydda sådan information. Projektet utgick på att bekanta sig med olika kryptografiska standarder i en modern webbläsare, med fokus på WebAuthn. Därefter utvecklades och designades en Proof Of Concept-applikation i Amazon webservice som använde sig av WebAuthn för autentisering. Tilläggsfunktioner som möjliggör återanvändning av den privata nyckeln som genereras av WebAuthn implementerades och testades. Dessa tillägg inkluderar pseudo-random function (PRF) och large blob. Resultatet blev en fungerande webbapplikation i Amazon webservice som använder sig av WebAuthn-standarden där en användare har möjlighet att registrera samt autentisera sig med hjälp av biometriska metoder i stället för lösenord. Implementationen av tillägg för återanvändning av privata nycklar visade sig vare en utmaning. Tekniska svårigheter med webbläsare, protokoll och autentiseringsenheter, samt det faktum att WebAuthn-standarden är relativt ny, påverkade implementationen av tilläggen. Det kan vara värt att notera att med tiden kommer fler webbläsare och autentiseringsenheter troligtvis stödja dessa funktioner, vilket kan möjliggöra återanvändning av privata nycklar. Avslutningsvis visade projektet att det är möjligt att skapa en webbapplikation i Amazon webservice som använder sig av WebAuthN-standarden och möjliggör autentisering med biometriska metoder. Trots de tekniska utmaningarna med pseudo-random function (PRF) och large blob, är det en lovande riktning för framtida implementeringar när standarden mognar och stöd för tilläggsfunktionerna förbättras., Today, passwords are commonly used as an authentication method in modern applications. However, more and more companies and applications are moving away from this method and instead using encrypted keys and certificates to increase security. Additionally, phones and computers have been developed that have hardware security modules to store and protect such information. The project was based on getting to know different cryptographic standards in a modern browser, with a focus on WebAuthn. Next, a Proof-of-Concept application was developed and designed in AWS that used WebAuthn for authentication. Additional features that allow reuse of the private key generated by WebAuthn were implemented and tested. These extensions include pseudo-random function (PRF) and large blob. The result was a functioning web application in AWS that uses the WebAuthn standard where a user can register and authenticate themselves using biometric methods instead of passwords. The implementation of private key reuse extensions proved to be a challenge. Technical difficulties with browsers, protocols, and authenticators, as well as the fact that the WebAuthnstandard is relatively new, affected the implementation of the extensions. It may be worth noting that over time, more browsers, and authentication devices will likely support these features, which may allow private key reuse. In conclusion, the project showed that it is possible to create a web application in AWS that uses the WebAuthn-standard and enables authentication with biometric methods. Despite the technical challenges with pseudo-random function (PRF) and large blob, it is a promising direction for future implementations as the standard matures and support for the extension functions improves.

Nudges are increasingly being proposed and used as a policy tool around the world. The success of nudges depends on public acceptance. However, several questions about what makes a nudge acceptable remain unanswered. In this paper, we examine whether policy alternatives to nudges influence the public's acceptance of these nudges: Do attitudes change when the nudge is presented alongside either a more paternalistic policy alternative (legislation) or a less paternalistic alternative (no behavioral intervention)? In two separate samples drawn from the Swedish general public, we find a very small effect of alternatives on the acceptability of various default nudges overall. Surprisingly, we find that when the alternative to the nudge is legislation, acceptance decreases and perceived intrusiveness increases (relative to conditions where the alternative is no regulation). An implication of this finding is that acceptance of nudges may not always automatically increase when nudges are explicitly compared to more paternalistic alternatives., Funding: Lansforakringar Research Alliance [P15/02]

Compassion collapse is a phenomenon where feelings and helping behavior decrease as the number of needy increases. But what are the underlying mechanisms for compassion collapse? Previous research has attempted to pit two explanations: Limitations of the feeling system vs. motivated down-regulation of emotion, against each other. In this article, we critically reexamine a previous study comparing these two accounts published in 2011 and present new data that contest motivated down-regulation of emotion as the primary explanation for compassion collapse.

Interventions aimed to change behavior (so called nudges) are becoming more and more popular among policymakers. However, in order to be able to effectively use nudges, it is important to understand when and why people find them acceptable. The objective of this thesis is therefore to improve the understanding of when nudges are judged to be acceptable. The thesis focuses on a model for behavioral change. The model contains two parts, nudge technique and acceptance of nudges. Nudge technique refers to how the nudge is designed to function in regard to psychological mechanism and functionality. The nudge technique part of the model is expanded and problematized from an ethical perspective in the first part of this thesis, by exemplifying psychological mechanisms behind different techniques and explaining why they might be intrusive to individuals’ freedom of choice. In the second part of this thesis it is discussed why acceptance is an important component of making nudging legitimate and effective. This is followed by a discussion of how acceptance is empirically measured. The empirical part of the thesis is based on four papers which all use a quantitative online survey approach to study the judgements of nudges from the general public. Paper 1 was a first attempt to measure whether nudges which are common in the nudge literature are acceptable interventions according to the general public. We found that the nudges that were categorized as pro-self were more likely to be rated as acceptable and less likely to be perceived as intrusive to freedom of choice compared to pro-social nudges. Furthermore, the effect of decision styles and worldview on acceptance was explored. In paper 2, we explored whether the difference between acceptance found for pro-social nudges and proself nudges could be increased by framing nudges as beneficial for society or individuals. The framing had no effect on acceptance but, as in paper 1, pro-social nudges were found to be more intrusive

We use skin conductance to measure emotional arousal in subjects who make risky choices under time pressure or time delay. Our results show a strong correlation between subjects skin conductance responses and their risky choices under time pressure but not under time delay. Subjects were more risk taking for higher levels of measured electrodermal activity (skin conductance). In line with descriptive theories of risky choice, the effect was most pronounced for choices involving losses rather than gains. Taken together, our findings indicate that participants under time pressure rely on affect at the point of decision-making. This provides support for behavioral models that recognize the role of emotional brain systems in decision-making under risk., Funding Agencies|Marianne and Marcus Wallenberg foundation [2014.0187]; Ragnar Soderberg foundation

The reported study investigated three gender-related effects on the rated persuasiveness of a speech given by a humanoid robot: (1) the female or male gendered voice and visual appearance of the robot, (2) the female or male gender of the participant, and (3) the interaction between robot gender and participant gender. The study employed a measure of persuasiveness based on the Aristotelian modes of persuasion: ethos, pathos and logos. In contrast to previous studies on gender bias toward intelligent virtual agents and robots, the gender of the robot did not influence the rated persuasiveness of the speech, and female participants rated the speech as more persuasive than men overall.

Att det idag finns flera metoder och modeller för att fatta beslut är inte konstigt då beslutsfattande sker varje dag och i vissa sammanhang kan ge ödesdigra konsekvenser om det blir fel. Denna kandidatuppsats kan ses som en förstudie för hur naturligt beslutsfattande skulle kunna stödjas genom en förbättrad utbildning till beslutsfattare. Uppsatsen ämnar behandla naturligt beslutsfattande och intuition hos experter inom räddningstjänsten, närmare bestämt om de använder intuition och i så fall vad som ligger till grund för denna intuition. Intervjuer utfördes på räddningstjänsten i Motala efter critical decision method som är framtagen för cognitive task analysis. Inom räddningstjänsten använder sig befälen av intuition när de tar det flesta av sina beslut i fält. Resultaten av intervjuerna pekar på att intuition verkar ske undermedvetet vilket ger stöd för recognition primed decision model, i kombination med negativa ledtrådar och hävstångspunkter.