2026-06-18 –, A113 (capacity 64)
The EU-funded CCAT project is transitioning academic security tools from lab prototypes to professional-grade software. Because poor usability often leads to crypto misuse and security failures, we are conducting usability research to ensure these tools fit real-world workflows. We invite attendees to test these prototypes and help shape their development.
The CCAT toolset:
1. TLS-Scanner (2016–Present): a tool for checking the settings of TLS clients and servers. Target users: security solution providers.
2. SCRUTINY (2006–Present): a toolset for assessing cryptographic implementations in hardware devices (smartcards, TPM, etc.) and software libraries. Target users: crypto-evaluation specialists
3. sec-certs (2022–Present): an analysis tool for the CC, FIPS 140, and EUCC landscapes, mapping the relationships between certification documents and products. Target users: vendors, authorities, and certificate consumers.
I am a postdoctoral researcher in usable security at Masaryk University, Czechia. I hold a PhD from the University of Tartu, Estonia, where my research focused on bridging the gap between academic security tools and expert users. Specializing in usable security, regulatory compliance, and information security, I combine technical engineering with human-centric design to build solutions that support security-aware decision-making in organizations.
