Proceedings 2023 Symposium on Usable Security最新文献

User Attitudes Towards Controls for Ad Interests Estimated On-device by the Browser 用户对浏览器在设备上估计的广告兴趣控制的态度

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.239417

F. Lachner, Minzhe Yuan Chen Cheng, Theodore T. Olsauskas-Warren

引用次数: 0

"I didn't click": What users say when reporting phishing “我没有点击”:用户在报告网络钓鱼时所说的话

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.233129

Nikolas Pilavakis, Adam D. G. Jenkins, Nadin Kökciyan, Kami Vaniea

引用次数: 0

Analyzing the Patterns and Behavior of Users When Detecting and Preventing Tech-enabled Stalking 在检测和防止技术跟踪时分析用户的模式和行为

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.238140

Nick Ceccio, Naman Gupta, Majed Almansoori, Rahul Chatterjee

引用次数: 0

Investigating User Behavior Towards Fake News on Social Media Using Gaze and Mouse Movements 通过凝视和鼠标移动来调查用户对社交媒体上虚假新闻的行为

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.232041

Yasmeen Abdrabou, Elisaveta Karypidou, Florian Alt, Mariam Hassib

引用次数: 3

Kids, Cats, and Control: Designing Privacy and Security Dashboards for IoT Home Devices 孩子，猫和控制:为物联网家庭设备设计隐私和安全仪表板

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.236290

Jacob Abbott, Jayati Dev, DongInn Kim, S. Gopavaram, Meera Iyer, Shivani Sadam, Shrirang Mare, Tatiana R. Ringenberg, Vafa Andalibi, L. Camp

{"title":"Kids, Cats, and Control: Designing Privacy and Security Dashboards for IoT Home Devices","authors":"Jacob Abbott, Jayati Dev, DongInn Kim, S. Gopavaram, Meera Iyer, Shivani Sadam, Shrirang Mare, Tatiana R. Ringenberg, Vafa Andalibi, L. Camp","doi":"10.14722/usec.2023.236290","DOIUrl":"https://doi.org/10.14722/usec.2023.236290","url":null,"abstract":"—In the last decade integration of Internet of Things (IoT) ecosystems has increased exponentially, and it is necessary that our understanding of human behavior when interacting with multiple smart devices in an IoT ecosystem keep pace. To better understand users’ perceptions and use of in-home IoT ecosystem over time, we implemented an ecosystem in homes of participants so that we could both test previous findings about individual devices and identify differences that arise in the content of a home with multiple IoT devices. Specifically, we recruited eight participants from separate households who installed identical IoT configurations, and interviewed each participant for five weeks. We included an Android dashboard to provide device control and data transparency. We detail the semi-structured interviews to compare user perceptions of what devices are classified as IoT, the perceived sustainability of IoT devices, interactions with and desires of dashboard information, and exploration of current notification preferences and mitigation strategies. We discuss the factors which participants identified as being relevant to their personal experiences with IoT devices and contribute recommendations for dashboard designs and control mechanisms for IoT devices. We note that the participants uniformly had a more expansive definition of IoT than that found in much of the previous literature, implying that our understanding of perceptions of in-home IoT may be informed by previous research on security systems, wearables, watches, and phones. We identify where our results reify findings of studies","PeriodicalId":407611,"journal":{"name":"Proceedings 2023 Symposium on Usable Security","volume":"83 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126293054","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

An Exploratory Study of Malicious Link Posting on Social Media Applications 社交媒体应用中恶意链接发布的探索性研究

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.234399

Muhammad Hassan, Mahnoor Jameel, Masooda N. Bashir

{"title":"An Exploratory Study of Malicious Link Posting on Social Media Applications","authors":"Muhammad Hassan, Mahnoor Jameel, Masooda N. Bashir","doi":"10.14722/usec.2023.234399","DOIUrl":"https://doi.org/10.14722/usec.2023.234399","url":null,"abstract":"Social network platforms are now widely used as a mode of communication globally due to their popularity and their ease of use. Among the various content-sharing capabilities made available via these applications, link-sharing is a common activity among social media users. While this feature provides a desired functionality for the platform users, link sharing enables attackers to exploit vulnerabilities and compromise users’ devices. Attackers can exploit this content-sharing feature by posting malicious/harmful URLs or deceptive posts and messages which are intended to hide a dangerous link. However, it is not clear how the most common social media applications monitor and/or filter when their users share malicious URLs or links through their platforms. To investigate this security vulnerability, we designed an exploratory study to examine the top five android social media applications’ performance when it comes to malicious link sharing. The aim was to determine if the selected applications had any filtering or defenses against malicious URL sharing. Our results show that most of the selected social media applications did not have an effective defense against the posting and spreading of malicious URLs. While our results are exploratory, we believe our study demonstrates the presence of a vital security vulnerability that malicious attackers or unaware users can use to spread harmful links. In addition, our findings can be used to improve our understanding of link-based attacks as well as the design of security measures that usability into account.","PeriodicalId":407611,"journal":{"name":"Proceedings 2023 Symposium on Usable Security","volume":"129 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130385731","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Security Awareness Training through Experiencing the Adversarial Mindset 通过体验对抗心态来培养安全意识

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.237300

Jens Dalgaard, N.A.M. Janssen, O. Kulyk, C. Schürmann

引用次数: 0

BANS: Evaluation of Bystander Awareness Notification Systems for Productivity in VR 旁观者意识通知系统在VR生产力的评估

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.234566

S. Mansour, Pascal Knierim, Joseph O'Hagan, Florian Alt, Florian Mathis

引用次数: 4

The Walls Have Ears: Gauging Security Awareness in a Home Workspace 《隔墙有耳:衡量家庭工作空间的安全意识

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.231868

G. Jayakrishnan, Vijayanand Banahatt, S. Lodha

引用次数: 1

Automatic Retrieval of Privacy Factors from IoMT Policies: ML and Custom NER Approach 从IoMT策略中自动检索隐私因素:ML和自定义NER方法

Proceedings 2023 Symposium on Usable Security Pub Date : 1900-01-01 DOI: 10.14722/usec.2023.235685

Nyteisha Bookert, Mohd M. Anwar

{"title":"Automatic Retrieval of Privacy Factors from IoMT Policies: ML and Custom NER Approach","authors":"Nyteisha Bookert, Mohd M. Anwar","doi":"10.14722/usec.2023.235685","DOIUrl":"https://doi.org/10.14722/usec.2023.235685","url":null,"abstract":"—Patient-generated health data is growing at an unparalleled rate due to advancing technologies (e.g., the Internet of Medical Things, 5G, artificial intelligence) and increased consumer transactions. The influx of data has offered life-altering solutions. Consequently, the growth has created signif- icant privacy challenges. A central theme to mitigating risks is promoting transparency and notifying stakeholders of data practices through privacy policies. However, natural language privacy policies have several limitations, such as being difficult to understand (by the user), lengthy, and having conflicting requirements. Yet they remain the de facto standard to inform users of privacy practices and how organizations follow privacy regulations. We developed an automated process to evaluate the appropriateness of combining machine learning and custom named entity recognition techniques to extract IoMT-relevant privacy factors in the privacy policies of IoMT devices. We employed machine learning and the natural language processing technique of named entity recognition to automatically analyze a corpus of policies and specifications to extract privacy-related information for the IoMT device. Based on the natural language analysis of policies, we provide fine-grained annotations that can help reduce the manual and tedious process of policy analysis and aid privacy engineers and policy makers in developing suitable privacy policies.","PeriodicalId":407611,"journal":{"name":"Proceedings 2023 Symposium on Usable Security","volume":"349 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132550829","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0