Users' conceptions of web security

Friedman, Batya; Hurley, David; Howe, Daniel C.; Felten, Edward W.; Nissenbaum, Helen

doi:10.1145/506558.506577

Cited by 41 publications

(58 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As of late a similar methodology was used by Poole, et al [24] in the context of home computer networks, by Yan [30] in understanding how children conceptualize the Internet and by Friedman et al [10] in understanding web security.…”

Section: Methodsmentioning

confidence: 99%

An Image of Electricity: Towards an Understanding of How People Perceive Electricity

Chisik

2011

Human-Computer Interaction – INTERACT 2011

View full text Add to dashboard Cite

Abstract.Although an enormous amount of research effort has been devoted to understanding people's energy consumption habits, visualizing their consumption and finding ways of motivating them towards more sustainable behaviours we are still in the dark with regards to people's basic perception of electricity, their concept of what electricity is and their notion of the consumption rates of various electrical devices. In this study we have employed a sketching methodology to elicit people's basic mental image of what electricity is, how they conceive of the electrical infrastructure in their home and which devices they think represent the largest drain on their wallets. Preliminary analysis of the results show that people do not have a clear mental model of electricity and tend to associate the size of the device and the duration of use with higher rates of consumption regardless of the type of device, the type of use it is put to and its actual consumption level.

show abstract

Section: Methodsmentioning

confidence: 99%

An Image of Electricity: Towards an Understanding of How People Perceive Electricity

Chisik

2011

Human-Computer Interaction – INTERACT 2011

View full text Add to dashboard Cite

show abstract

“…They might also look for the presence of the SSL or TLS lock icon in the corner of the browser and click on it to verify that it has a certificate that matches the web site they believe they are visiting. Unfortunately, many users do not understand or have misconceptions about the meaning of the lock icon [12] and there are a number of ways that the lock icon can be spoofed or manipulated, so it is not a completely reliable indicator. In addition, many legitimate web sites do not use SSL/TLS except when transmitting form data, so the lock icon will not appear until after a user presses the submit button.…”

Section: Cuesmentioning

confidence: 99%

Decision strategies and susceptibility to phishing

Downs

Holbrook

Cranor

2006

Proceedings of the Second Symposium on Usable Privacy and Security - SOUPS '06

228

208

View full text Add to dashboard Cite

Phishing emails are semantic attacks that con people into divulging sensitive information using techniques to make the user believe that information is being requested by a legitimate source. In order to develop tools that will be effective in combating these schemes, we first must know how and why people fall for them. This study reports preliminary analysis of interviews with 20 nonexpert computer users to reveal their strategies and understand their decisions when encountering possibly suspicious emails. One of the reasons that people may be vulnerable to phishing schemes is that awareness of the risks is not linked to perceived vulnerability or to useful strategies in identifying phishing emails. Rather, our data suggest that people can manage the risks that they are most familiar with, but don't appear to extrapolate to be wary of unfamiliar risks. We explore several strategies that people use, with varying degrees of success, in evaluating emails and in making sense of warnings offered by browsers attempting to help users navigate the web.

show abstract

“…Few notable exceptions include Friedman et al's study showing the low recognition rate of secure connections by diverse sets of users [110], and Whalen and Inkpen's experiments on the effectiveness of security cues (the lock icon) in web surfing sessions [306]. Whalen and Inkpen used eye-tracking techniques to follow users' focus of view when interacting with web sites.…”

Section: End-user Awareness Of Personal Disclosuresmentioning

confidence: 99%

End-User Privacy in Human-Computer Interaction

Iachello

Hong

2007

FNT in Human-Computer Interaction

170

View full text Add to dashboard Cite

The purpose of this article is twofold. First, we summarize research on the topic of privacy in Human-Computer Interaction (HCI), outlining current approaches, results, and trends. Practitioners and researchers can draw upon this review when working on topics related to privacy in the context of HCI and CSCW. The second purpose is that of charting future research trends and of pointing out areas of research that are timely but lagging. This work is based on a comprehensive analysis of published academic and industrial literature spanning three decades, and on the experience of both ourselves and of many of our colleagues.

show abstract