Usability Characteristics of Security and Privacy Tools: The User’s Perspective

Abstract

Use of security and privacy tools is still limited for various reasons, including usability issues. This paper analyses usability characteristics of security and privacy tools by drawing on relevant literature and employing scenario-based questionnaires and interviews with 150 users to capture their views. Based on users' feedback, we analyse the role of usability characteristics and identify critical issues such as transparency, control of personal data, design and accessibility and consistency. This paper provides insights into the multifaceted issue of usability of security tools from the users' perspective and a comprehensive picture of users' needs and expectations. Some of the findings of this study show that users regard as important that security and privacy tools incorporate usability characteristics relevant to installation, design and accessibility, control and automation, visible feedback, and locatable security settings. Furthermore, users encounter problems with understanding technical terms and report that the availability of tools among smartphones and operating systems is a usability issue.

From theory to practice: guidelines for enhancing information security management

“…ISO 27005:2011 (in Section 9.2 and Annex F) provides general directions on the criteria which security managers need to consider when selecting the appropriate controls during the risk management process, such as ease of use. Whilst usability plays an important role in motivating users to use technologies (Nielsen, 1994), security tools are still not usable enough (Whitten and Tygar, 1999; Topa and Karyda, 2018; Vemou et al , 2015). This is an on-going challenge for researchers and designers, who need to design and develop usable security tools.…”

Analysing information security behaviour

“…To address the first research question a thorough review and analysis of related literature in the field of information security behavior was conducted, in order to establish a comprehensive picture of all the documented factors related to security behavior (Topa & Karyda, 2015;Topa & Karyda, 2016); through this analysis areas were identified that are not sufficiently explored, such as the role of usability of security technology. This aspect was further explored through a usability survey (Topa & Karyda, 2018). By combining the findings from both the literature review and the survey a Technological-Organisational-Individual framework is developed.…”

“…There are a number of important technological aspects which are relevant to the usability of security tools, which according to literature may impact on security behaviour and consequently on ISP compliance (Topa & Karyda, 2018). It is therefore essential that security managers be made aware of these security behaviour determinants and take the appropriate steps to ensure that any security tools used by the organisation have optimum usability.…”

“…One significant aspect is that of accessibility (Topa & Karyda, 2018), which relates to security tools being accessible to people with disabilities.…”

“…Literature findings suggest that the language used has to be clear and plain, easy to understand, and without too many technical terms. This is particularly important for non-IT employees (Topa & Karyda, 2018).…”