It is not about the design - it is about the content! Making warnings more efficient by communicating risks appropriately

Kauer, Michaela ; Pfeiffer, Thomas ; Volkamer, Melanie ; Theuerling, Heike ; Bruder, Ralph
eds.: Suri, Neeraj ; Waidner, Michael (2012)
It is not about the design - it is about the content! Making warnings more efficient by communicating risks appropriately.
Sicherheit 2012 - Sicherheit, Schutz und Zuverlässigkeit - 6. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft fuer Informatik e.V. (GI). Darmstadt (07.03.2012-09.03.2012)
Conference or Workshop Item, Secondary publication, Postprint

Preview

It is not about the design – it is about the content! Making warnings more efficient by communicating risks appropriately - PDF
ItIsNotAboutTheDesignItIsAboutTheContent.pdf
Copyright Information: In Copyright.
Download (305kB) | Preview

Item Type:

Conference or Workshop Item

Type of entry:

Secondary publication

Title:

It is not about the design - it is about the content! Making warnings more efficient by communicating risks appropriately

Language:

English

Date:

28 September 2012

Place of Publication:

Darmstadt

Year of primary publication:

2012

Place of primary publication:

Bonn

Publisher:

Gesellschaft für Informatik e.V. (GI)

Book Title:

Sicherheit 2012 - Sicherheit, Schutz und Zuverlässigkeit - Beiträge der 6. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft fuer Informatik e.V. (GI)

Series:

GI-Edition - Lecture Notes in Informatics (LNI)

Series Volume:

P-195

Event Title:

Sicherheit 2012 - Sicherheit, Schutz und Zuverlässigkeit - 6. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft fuer Informatik e.V. (GI)

Event Location:

Darmstadt

Event Dates:

07.03.2012-09.03.2012

Corresponding Links:

Related work

Abstract:

Most studies in usable security research aim at a quantification of persons, who – depending on the subject – fall for phishing, pass on their password, download malicious software and so on. In contrast, little research is done to identify the reasons for such insecure behavior. Within this paper, the result of a laboratory study is presented in which participants were confronted with different certificate warnings. Those warnings were presented when the participants tried to access different websites with different criticality (online banking, online shopping, social networks and information sites). Besides quantitative analyses of participants who were willing to use a websites despite the warning, the main focus of this work is to identify reasons for their decision. As a result of our study those risks are identified which were unacceptable for most participants to take and thereby might help to prevent unsecure usage behavior in the web by rewording warnings according to the perceived risks.

Alternative keywords: