The research group SECUSO (Security • Usability • Society) belongs to the Institute of Applied Informatics and Formal Description Methods (AIFB) of the Karlsruhe Institute of Technology (KIT). The group was founded in 2011 by Prof. Dr. Melanie Volkamer at the TU Darmstadt. SECUSO moved to the Karlsruhe Institute of Technology at the beginning of 2018. SECUSO is a member of Kastel, K-CIST and KD²Lab.
Current contributions in the field of usable security and privacy can be submitted to the Conference on Sociotechnical Cybersecurity and Privacy (SCP2026). SCP is a new conference, formed by merging two well-established and successful venues in the area of sociotechnical, user-centric security and privacy: EuroUSEC (European Symposium on Usable Security) and STAST (International Workshop on Socio-Technical Aspects in Security). The goal of SCP is to create a unified, high-quality forum that brings together researchers and practitioners working across computer security, privacy, human-computer interaction, and the social and behavioral sciences. Papers must be registered by May 20, 2026, and submissions are accepted until May 25, 2026. Accepted papers will be published through IEEE. SCP 2026 will take place September 2nd and 3rd, 2026 in Belval, Luxembourg.
To the CfPWe are delighted that our NoPhish materials are becoming increasingly popular. Most recently, the district of Giessen and the Saarbrücken regional association decided to purchase our NoPhish course for citizens and use it as awareness material in their organizations. The district of Giessen, for example, intends to use the course to raise awareness of phishing among colleagues in the district administration and all 18 municipalities in the district. The NoPhish course brings together all the information on the topic of fraudulent messages with numerous examples, exercises, and further information for self-study. This makes it the ideal basis for imparting and disseminating knowledge, e.g., through training courses and lectures within your own company.
About NoPhishFour papers from SECUSO were accepted at the Conference on Human Factors in Computing System (CHI 2026): "Why Johnny Checks but Doesn't Alert: Reporting as the Missing Step in Verifiable Internet Voting" by Tobias Hilt, Christian Mack, Benjamin Berens, and Melanie Volkamer, "Development, Evaluation, and Implementation of SEQR -- a Usable Secure QR code Scanner" by Mattia Mossano & Maxime Veit, Tobias Länge, Benjamin Berens, Filipo Sharevski, and Melanie Volkamer, "`It's Confusing, Insecure, and Messy'' -- Mapping the Gaps Between Stakeholders' Cybersecurity Mental Models in the Danish Economy" by Judith Kankam-Boateng, M. Peressotti, J. Stentoft, K. A. Wickstrøm, V. C. Keating, L. A. Tumchewics, O. Schmitt, A. Theussen, and Peter Mayer, as well as "From Fear to Control: Developing a Three-Factor Scale for Cybersecurity Anxiety (CybAS)" by N. Dall, H. Hagge, Peter Mayer, and Cori Faklaris. CHI is the leading international conference in human-computer interaction, and we congratulate all authors on this great success. CHI 2026 will take place from April 13 to 17 in Barcelona, Spain.
About CHIOur Awareness/ Challenge Poster interactive exercises have now been translated into English, which makes them even more accessible. Learn about the essentials of how to detect and prevent phishing via playful challenges. Also, feel free to download and distribute our posters in your company premises to increase people’s exposure to this important awareness-raising tool. Phishing continues to pose major cybersecurity risks to people and organisations and our approaches can help you stay safe.
English Awareness/ Challenge Poster