Methodology for a field study of anti-malware software

Authors:
Fanny Lalonde Lévesque;Carlton R. Davis;José M. Fernandez;Sonia Chiasson;Anil Somayaji
Affiliations:
École Polytechnique de Montréal, Montréal, Canada;École Polytechnique de Montréal, Montréal, Canada;École Polytechnique de Montréal, Montréal, Canada;Carleton University, Ottawa, Canada;Carleton University, Ottawa, Canada
Venue:
FC'12 Proceedings of the 16th international conference on Financial Cryptography and Data Security
Year:
2012

Citing 7
Cited 1

A large-scale study of web password habits

Proceedings of the 16th international conference on World Wide Web
A second look at the usability of click-based graphical passwords

Proceedings of the 3rd symposium on Usable privacy and security
Towards understanding IT security professionals and their tools

Proceedings of the 3rd symposium on Usable privacy and security
Digital parenting: designing children's safety

Proceedings of the 23rd British HCI Group Annual Conference on People and Computers: Celebrating People and Technology
Folk models of home computer security

Proceedings of the Sixth Symposium on Usable Privacy and Security
Towards understanding ATM security: a field study of real world ATM use

Proceedings of the Sixth Symposium on Usable Privacy and Security
Evaluating security products with clinical trials

CSET'09 Proceedings of the 2nd conference on Cyber security experimentation and test

A clinical study of risk factors related to malware infections

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Anti-malware products are typically evaluated using structured, automated tests to allow for comparison with other products and for measuring improved efficiency against specific attacks. We propose that anti-malware testing would benefit from field studies assessing effectiveness in more ecologically valid settings. This paper presents our methodology for conducting a 4-month field study with 50 participants, including discussion of deployment and data collection, encouraging retention of participants, ethical concerns, and our experience to date.