informed-concent.md 3.0 KB
INFORMED CONSENT TO PARTICIPATE IN A RESEARCH PROJECT
“Investigating SSH Information Leaks (Dataset 1)”
This form asks for your agreement to participate in a research project for SecureShell. Your participation involves using the SecureShell program over a monitored network to type sentences run commands from the attached document.
These tasks are expected to take approximately 30 minutes. If you stop early your data may not be used. There are no risks anticipated with your participation. Those in the cybersecurity, system administration and software development industries may benefit from your participation. If you are interested in participating, please review the following information:
The purpose of the study is to examine if the pattern of network traffic from SecureShell is unique to a user such that an outside party can identify them. Additionally, this study will examine if the timing of publicly visible network traffic can be used to identify keystrokes. Potential benefits associated with the study include improvements in secure internet communications.
If you agree to participate, you will be asked to complete the attached set of instructions. This research involves finding vulnerabilities in the SecureShell protocol and as such anything you type in the SecureShell application as part of this study will be recorded for validation purposes. You are advised to not type any passwords or otherwise sensitive information into a terminal being used as part of this study.
Please be aware that you are not required to participate in this research, refusal to participate will not involve any penalty or loss of benefits to which you are otherwise entitled, and you may discontinue your participation at any time. Your participation or refusal will not contribute or impact your grade in any of your classes. The focus of this study is on the behavior of the SecureShell system and thus your responses to prompts and inputs to the terminal are only incidentally involved in the study. There are no risks anticipated with your participation in this study, as your data will be maintained confidentially.
This research is being conducted by Dr. Bruce DeBruhl in the Department of Computer Science and Software Engineering at Cal Poly, San Luis Obispo. If you have questions regarding this study or would like to be informed of the results when the study is completed, please contact Dr. DeBruhl at bdebruhl@calpoly.edu. If you have concerns regarding the manner in which the study is conducted, you may contact Dr. Michael Black, Chair of the Cal Poly Institutional Review Board, at (805) 756-2894, mblack@calpoly.edu, or Ms. Debbie Hart, Compliance Officer, at (805) 756-1508, dahart@calpoly.edu.
If you agree to voluntarily participate in this research project as described, please indicate your agreement by performing one or more tasks from above when the researcher tells you. Please keep a copy of this form for your reference, and thank you for your participation in this research.