Usable Security: Revealing End-Users Comprehensions on Security Warnings

Amran, Ammar; Zaaba, Zarul Fitri; Singh, Manmeet; Marashdih, Abdalla Wasef

doi:10.1016/j.procs.2017.12.198

Cited by 14 publications

(11 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The use of security warnings to alert users about events that occur on their computer, that could compromise their security and privacy, was researched in [14][15][16]. In [15] the authors suggest that users tend to ignore security warnings due to a lack of attention, understanding or motivation. A survey was used to gain understanding of user perception and understanding towards security warnings.…”

Section: Literature Reviewmentioning

confidence: 99%

“…The author undertook a study to establish the views of NEUs on personal cyber security and suggests a lack of technical knowledge and ability to explore network communication, results in little or no awareness of security issues. To test this statement, we derive a null and alternate hypothesis as follows: Previous studies such as [15] have demonstrated relationships between the technical ability of a user, and the ability to be perceive and be aware of risks. To our knowledge, this paper presents the first study to assess the ability of users to perceive and detect threats (botnets) facing the IoT.…”

Section: Situational Awareness Of Threats Facing the Iotmentioning

confidence: 99%

See 1 more Smart Citation

Evaluating Awareness and Perception of Botnet Activity within Consumer Internet-of-Things (IoT) Networks

2019

View full text Add to dashboard Cite

The growth of the Internet of Things (IoT), and demand for low-cost, easy-to-deploy devices, has led to the production of swathes of insecure Internet-connected devices. Many can be exploited and leveraged to perform large-scale attacks on the Internet, such as those seen by the Mirai botnet. This paper presents a cross-sectional study of how users value and perceive security and privacy in smart devices found within the IoT. It analyzes user requirements from IoT devices, and the importance placed upon security and privacy. An experimental setup was used to assess user ability to detect threats, in the context of technical knowledge and experience. It clearly demonstrated that without any clear signs when an IoT device was infected, it was very difficult for consumers to detect and be situationally aware of threats exploiting home networks. It also demonstrated that without adequate presentation of data to users, there is no clear correlation between level of technical knowledge and ability to detect infected devices.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Section: Situational Awareness Of Threats Facing the Iotmentioning

confidence: 99%

Evaluating Awareness and Perception of Botnet Activity within Consumer Internet-of-Things (IoT) Networks

2019

View full text Add to dashboard Cite

show abstract

“…The calculation of the probability for an attack to succeed as Proba attackSucceed established in (20), The probability's calculation that the defensive measure succeed Proba def enseSucceed established in (23), Losses related to each player respectively established in (24) and (25).…”

Section: They Includementioning

confidence: 99%

“…A script 14 in Matlab has been written to determine utility functions of players for a not repeated game and simulates Equation (20).…”

Section: Simulations and Interpretations In Case Of An Attackmentioning

confidence: 99%

“…There are several forms of phishing [6][7][8]; email phishing in which the attacker sends a fake email to trick users to send sensitive information [9,10], Uniform Resource Locator (URL) phishing aims at building fake copies of legitimate websites. Vishing in which malicious people initiate voice calls, put the target victim in either on the browser [20][21][22][23] or in the operating system (OS) [24,25]. The third category relies on artificial intelligence to profile spear-phishing activities [26][27][28][29][30][31].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Game Theoretical Model for Anticipating Email Spear-Phishing Strategies

Tchakounté

Nyassi²,

Danga³

et al. 2018

ICST Transactions on Scalable Information Systems

View full text Add to dashboard Cite

A solution to help victims against phishing is anticipating and leveraging impacts related to phisher actions. In this regard, this work reshapes game theoretical logic between Intrusion Detection System (IDS) agents and insiders to email spear-phishing interactions. The email spear-phishing attack is designed as a non-cooperative and repeated game between opponents. Additionally, this work relies on Quantal Response Equilibrium (QRE) to build a game theoretical approach to predict the phisher's future intent based on past actions of both players. This approach is coupled with a recommendation strategy of appropriate allocation of resources to invest to strengthen user protection. Simulations on spear-phishing scenarios demonstrate the ability of the final system to intuitively guess the most likely phisher decisions. This work provides intelligence to spearphishing detectors and humans such that they can anticipate next phisher actions.

show abstract