Promoting a physical security mental model for personal firewall warnings

Authors:
Fahimeh Raja;Kirstie Hawkey;Steven Hsu;Kai-Le Wang;Konstantin Beznosov
Affiliations:
University of British Columbia, Vancouver, BC, Canada;Dalhousie University, Halifax, NS, Canada;University of British Columbia, Vancouver, BC, Canada;University of British Columbia, Vancouver, BC, Canada;University of British Columbia, Vancouver, BC, Canada
Venue:
CHI '11 Extended Abstracts on Human Factors in Computing Systems
Year:
2011

Citing 6
Cited 0

You've been warned: an empirical study of the effectiveness of web browser phishing warnings

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Mental models of security risks

FC'07/USEC'07 Proceedings of the 11th International Conference on Financial cryptography and 1st International conference on Usable Security
Do windows users follow the principle of least privilege?: investigating user account control practices

Proceedings of the Sixth Symposium on Usable Privacy and Security
Folk models of home computer security

Proceedings of the Sixth Symposium on Usable Privacy and Security
Crying wolf: an empirical study of SSL warning effectiveness

SSYM'09 Proceedings of the 18th conference on USENIX security symposium
It's too complicated, so i turned it off!: expectations, perceptions, and misconceptions of personal firewalls

Proceedings of the 3rd ACM workshop on Assurable and usable security configuration

Quantified Score

Hi-index	0.00

Visualization

Abstract

We used an iterative process to design personal firewall warnings in which the functionality of a firewall is visualized based on a physical security mental model. We performed a study to determine the degree to which our proposed warnings are understandable for our participants, and the degree to which they convey the risks and encourage safe behavior as compared to warnings based on those from a popular personal firewall. Initial results show that our warnings facilitate the comprehension of warning information, better communicate risk, and increase the likelihood of safe behavior. Moreover, they provided participants with a better understanding of both the functionality of a personal firewall and the consequences of their actions.