A Classification of Security Feedback Design Patterns for Interactive Web Applications

In order to design a user interface of a secure interactive application, a method is provided to designers with guidance in designing an adequate security information feedback using a library of user interface design patterns integrating security and usability. The resulting feedback is then evaluated against a set of design/evaluation criteria called Human-Computer Interaction for Security (HCI-S). In this way, notifications combining two or more channels required to achieve an effective feedback in case of a security issue are explicitly incorporated in the development life cycle. With this proposal we intend to complement previous efforts finding equilibrium between usability and security for interactive web applications.