TU Darmstadt / ULB / TUprints

Best Practices for Notification Studies for Security and Privacy Issues on the Internet

Maass, Max ; Pridöhl, Henning ; Herrmann, Dominik ; Hollick, Matthias (2022)
Best Practices for Notification Studies for Security and Privacy Issues on the Internet.
ARES 2021: The 16th International Conference on Availability, Reliability and Security. Vienna, Austria (17.-20.08.2021)
doi: 10.26083/tuprints-00021773
Conference or Workshop Item, Secondary publication, Postprint

[img] Text
2106.08029.pdf
Copyright Information: In Copyright.

Download (593kB)
Item Type: Conference or Workshop Item
Type of entry: Secondary publication
Title: Best Practices for Notification Studies for Security and Privacy Issues on the Internet
Language: English
Date: 2022
Place of Publication: Darmstadt
Publisher: Association for Computing Machinery
Book Title: The 16th International Conference on Availability, Reliability and Security
Series: ARES 2021
Collation: 10 Seiten
Event Title: ARES 2021: The 16th International Conference on Availability, Reliability and Security
Event Location: Vienna, Austria
Event Dates: 17.-20.08.2021
DOI: 10.26083/tuprints-00021773
Corresponding Links:
Origin: Secondary publication service
Abstract:

Researchers help operators of vulnerable and non-compliant internet services by individually notifying them about security and privacy issues uncovered in their research. To improve efficiency and effectiveness of such efforts, dedicated notification studies are imperative. As of today, there is no comprehensive documentation of pitfalls and best practices for conducting such notification studies, which limits validity of results and impedes reproducibility. Drawing on our experience with such studies and guidance from related work, we present a set of guidelines and practical recommendations, including initial data collection, sending of notifications, interacting with the recipients, and publishing the results. We note that future studies can especially benefit from extensive planning and automation of crucial processes, i. e., activities that take place well before the first notifications are sent.

Status: Postprint
URN: urn:nbn:de:tuda-tuprints-217730
Classification DDC: 000 Generalities, computers, information > 004 Computer science
Divisions: 20 Department of Computer Science > Sichere Mobile Netze
Date Deposited: 29 Jul 2022 13:15
Last Modified: 25 Nov 2022 07:46
URI: https://tuprints.ulb.tu-darmstadt.de/id/eprint/21773
PPN: 499051440
Export:
Actions (login required)
View Item View Item