Bridging the Gap in Computer Security Warnings: A Mental Model Approach

Authors:
Cristian Bravo-Lillo;Lorrie Faith Cranor;Julie Downs;Saranga Komanduri
Affiliations:
Carnegie Mellon University;Carnegie Mellon University;Carnegie Mellon University;Carnegie Mellon University
Venue:
IEEE Security and Privacy
Year:
2011

Citing 0
Cited 8

Improving computer security dialogs

INTERACT'11 Proceedings of the 13th IFIP TC 13 international conference on Human-computer interaction - Volume Part IV
Expectation and purpose: understanding users' mental models of mobile app privacy through crowdsourcing

Proceedings of the 2012 ACM Conference on Ubiquitous Computing
Operating system framed in case of mistaken identity: measuring the success of web-based spoofing attacks on OS password-entry dialogs

Proceedings of the 2012 ACM conference on Computer and communications security
OTO: online trust oracle for user-centric trust establishment

Proceedings of the 2012 ACM conference on Computer and communications security
An online experiment of privacy authorization dialogues for social applications

Proceedings of the 2013 conference on Computer supported cooperative work
Mental models of verifiability in voting

Vote-ID'13 Proceedings of the 4th international conference on E-Voting and Identity
Alice in warningland: a large-scale field study of browser security warning effectiveness

SEC'13 Proceedings of the 22nd USENIX conference on Security
Raising User Awareness about Privacy Threats in Participatory Sensing Applications through Graphical Warnings

Proceedings of International Conference on Advances in Mobile Computing & Multimedia

Quantified Score

Hi-index	0.00

Visualization

Abstract

Computer security warnings are intended to protect users and their computers. However, research suggests that these warnings might be largely ineffective because they're frequently ignored. The authors describe a mental model interview study designed to gain insight into how advanced and novice computer users perceive and respond to computer warnings. Developers can leverage the approaches of advanced users to design more effective warnings for novice users.