Bayesian Evaluation of User App Choices in the Presence of Risk Communication on Android Devices

Momenzadeh, Behnood; Gopavaram, Shakthidhar; Das, Sanchari; Camp, L. Jean

doi:10.1007/978-3-030-57404-8_16

Cited by 3 publications

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The purpose of using a Bayesian approach is to test the interaction in a noisy, confounded naturalistic environment and to provide a more robust confidence measure than a traditional means comparison. This paper expands upon the previous shorter report by the same authors (Momenzadeh et al, 2020) with additional results, increased methodological details and the inclusion of more related research.…”

Section: Introductionmentioning

confidence: 51%

Bayesian evaluation of privacy-preserving risk communication for user android app preferences

Momenzadeh

Gopavaram

Das

et al. 2021

ICS

View full text Add to dashboard Cite

Purpose The purpose of this paper is to propose practical and usable interactions that will allow more informed, risk-aware comparisons for individuals during app selections. The authors include an explicit argument for the role of human decision-making during app selection and close with a discussion of the strengths of a Bayesian approach to evaluating privacy and security interventions. Design/methodology/approach The authors focused on the risk communication in mobile marketplace’s realm, examining how risk indicators can help people choose more secure and privacy-preserving apps. Combining canonical findings in risk perception with previous work in usable security, the authors designed indicators for each app to enable decisions that prioritize risk avoidance. Specifically, the authors performed a natural experiment with N = 60 participants, where they asked them to select applications on Android tablets with accurate real-time marketplace data. Findings In the aggregate, the authors found that app selections changed to be more risk-averse in the presence of a user-centered multi-level warning system using visual indicators that enabled a click-thru to the more detailed risk and permissions information. Originality/value Privacy research in the laboratory is often in conflict with privacy decision-making in the marketplace, resulting in a privacy paradox. To better understand this, the authors implemented a research design based on clinical experimental approaches, testing the interaction in a noisy, confounded field environment.

show abstract

Section: Introductionmentioning

confidence: 51%

Bayesian evaluation of privacy-preserving risk communication for user android app preferences

Momenzadeh

Gopavaram

Das

et al. 2021

ICS

View full text Add to dashboard Cite

show abstract

IoT Marketplace: Willingness-To-Pay vs. Willingness-To-Accept

et al. 2021

View full text Add to dashboard Cite

Can You Hear Me Now? Audio and Visual Interactions That Change App Choices

2020

View full text Add to dashboard Cite

Android and iOS mobile operating systems use permissions to enable phone owners to manage access to their device's resources. Both systems provide resource access dialogues at first use and per-resource controls. Android continues to offer permission manifests in the Android PlayStore for older apps but is transitioning away from this. Neither manifests nor first-use dialogues enable people to easily compare apps based on resource requests, and the corresponding privacy and security risks. Without the ability to compare resource requests when choosing an app, customers cannot select those apps that request fewer resources. Unnecessary and excessive permission requests, overuse of resources, information exfiltration, and risky apps are endemic. To address this issue we built upon past work in warning science and risk communication to design multimedia indicators to communicate the aggregate privacy and security risk associated with an app. Specifically, we provided participants with a privacy rating using the familiar padlock icon and used audio notifications to either warn or reinforce user choices. We empirically tested participants' app decisions with these padlock icons and audio notifications. The results showed that people with both visual cues and audio feedback are more likely to make app choices that are inversely correlated with the resources requested by the app. Those with neither indicators made decisions reflecting only app rating, while decisions made by those with either the audio or the visual indicators are sometimes inversely correlated with resource requests. This illustrates that simple clear communication about apps' aggregate risk, as opposed to atomic resource requests, changes participants' app selections potentially mitigating the state of information overuse and potential abuse. Additionally, neither the visual indicator nor the audio feedback affected the time required for participants to make a decision.

show abstract

Bayesian Evaluation of User App Choices in the Presence of Risk Communication on Android Devices

Cited by 3 publications

References 14 publications

Bayesian evaluation of privacy-preserving risk communication for user android app preferences

Bayesian evaluation of privacy-preserving risk communication for user android app preferences

IoT Marketplace: Willingness-To-Pay vs. Willingness-To-Accept

Can You Hear Me Now? Audio and Visual Interactions That Change App Choices

Contact Info

Product

Resources

About