2013 Third Workshop on Socio-Technical Aspects in Security and Trust最新文献

Adopting the CMU/APWG Anti-phishing Landing Page Idea for Germany 采用德国CMU/APWG反网络钓鱼登陆页理念

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.12

M. Volkamer, Simon Stockhardt, Steffen Bartsch, M. Kauer

引用次数: 10

Applying the Lost-Letter Technique to Assess IT Risk Behaviour 应用失信技术评估资讯科技风险行为

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.15

Elmer Lastdrager, Lorena Montoya, P. Hartel, M. Junger

{"title":"Applying the Lost-Letter Technique to Assess IT Risk Behaviour","authors":"Elmer Lastdrager, Lorena Montoya, P. Hartel, M. Junger","doi":"10.1109/STAST.2013.15","DOIUrl":"https://doi.org/10.1109/STAST.2013.15","url":null,"abstract":"Information security policies are used to mitigate threats for which a technical prevention is not feasible. Compliance with information security policies is a notoriously difficult issue. Social sciences could provide tools to empirically study compliance with policies. We use a variation of the lost-letter technique to study IT risk behaviour, using USB keys instead of letters. The observational lost-letter study by Farrington and Knight (1979) was replicated in a university setting by dropping 106 USB keys. Labels on the USB keys were used to vary characteristics of the alleged victim. Observers noted characteristics of people who picked a USB key up and whether the USB key was returned. Results show that USB keys in their original box are stolen more than used ones and that people aged 30 or younger and those who place a found USB key in their pocket are more likely to steal. This suggests that the decision to steal a USB key is taken at the moment of pick up, despite ample opportunity to return it. The lost USB key technique proved to be a feasible method of data collection to measure policy compliance and thus also risk behaviour.","PeriodicalId":252423,"journal":{"name":"2013 Third Workshop on Socio-Technical Aspects in Security and Trust","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128780421","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Transparency Enhancing Tools (TETs): An Overview 透明度增强工具(TETs):概述

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.11

M. Janic, Jan Pieter Wijbenga, T. Veugen

{"title":"Transparency Enhancing Tools (TETs): An Overview","authors":"M. Janic, Jan Pieter Wijbenga, T. Veugen","doi":"10.1109/STAST.2013.11","DOIUrl":"https://doi.org/10.1109/STAST.2013.11","url":null,"abstract":"As the amount of users' information collected and exchanged on the Internet is growing, so are, consequently, the users' concerns that their privacy might be violated. Some studies have shown that a large number of users avoid engaging in online services due to privacy concerns. It has been suggested that increased transparency of privacy related mechanisms may promote users' trust. This paper reviews the relationship between users' privacy concerns, transparency enhancing and privacy enhancing mechanisms on the one hand, and users' trust on the other, based on the existing literature. Our literature review demonstrates that previous studies have produced inconsistent results, implying this relationship should be re-examined in future work. Impact of higher transparency on users' trust has been insufficiently studied. Current research seems to suggest that the increase of the understanding of privacy issues increases importance of privacy for trust. Use of privacy enhancing mechanisms by service provider also seems to promote the trust, but this may only hold when these mechanisms are understood by the user. A need for tools that would provide users with this kind of knowledge has also been repeatedly recognized. Additionally, this paper provides an overview and description of the currently available transparency enhancing tools. To the best of our knowledge, no such overview has been available to this end. We demonstrate that the majority of tools promote awareness. Most of them attempt to provide a better understanding of privacy policies, or provide insight in the third party tracking behavior. Two tools have been identified that provide some insight in the collected user's data. No tool providing specific information on, or access to, processing logic has been identified.","PeriodicalId":252423,"journal":{"name":"2013 Third Workshop on Socio-Technical Aspects in Security and Trust","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129825581","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 60

How Privacy Flaws Affect Consumer Perception 隐私缺陷如何影响消费者认知

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.13

Sadia Afroz, Aylin Caliskan, Jordan Santell, Aaron Chapin, R. Greenstadt

引用次数: 11

American and Indian Conceptualizations of Phishing 美国和印度的网络钓鱼概念

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.10

Rucha Tembe, Kyung Wha Hong, E. Murphy-Hill, C. Mayhorn, Christopher M. Kelley

引用次数: 10

Toward an Ontology for Insider Threat Research: Varieties of Insider Threat Definitions 面向内部威胁研究的本体:内部威胁定义的多样性

2013 Third Workshop on Socio-Technical Aspects in Security and Trust Pub Date : 2013-06-29 DOI: 10.1109/STAST.2013.14

David A. Mundie, Samuel J. Perl, Carly L. Huth

引用次数: 20