A comprehensive quality evaluation of security and privacy advice on the web

EM Redmiles, N Warford, A Jayanti, A Koneru… - 29th USENIX Security …, 2020‏ - usenix.org
End users learn defensive security behaviors from a variety of channels, including a plethora
of security advice given in online articles. A great deal of effort is devoted to getting users to …

Risk communication in cyberspace: A brief review of the information-processing and mental models approaches

J Chen - Current opinion in psychology, 2020‏ - Elsevier
Effective risk communication in cyberspace is critical for users to understand the potential
security risks and make secure decisions. Two approaches to risk communication …

Investigating influencer VPN ads on YouTube

O Akgul, R Roberts, M Namara, D Levin… - … IEEE Symposium on …, 2022‏ - ieeexplore.ieee.org
One widespread, but frequently overlooked, source of security information is influencer
marketing ads on YouTube for security and privacy products such as VPNs. This paper …

Replication: Stories as informal lessons about security

K Pfeffer, A Mai, E Weippl, E Rader… - … Symposium on Usable …, 2022‏ - usenix.org
Anecdotal stories about security threats told to non-experts by friends, peers, or the media
have been shown to be important in forming mental models and secure behaviors. In 2012 …

Tips, tricks, and training: supporting anti-phishing awareness among mid-career office workers based on employees' current practices

AC Tally, J Abbott, AM Bochner, S Das… - Proceedings of the …, 2023‏ - dl.acm.org
Preventing workplace phishing depends on the actions of every employee, regardless of
cybersecurity expertise. Based on 24 semi-structured interviews with mid-career office …

Digital Security—A Question of Perspective A Large-Scale Telephone Survey with Four At-Risk User Groups

F Herbert, S Becker, A Buckmann… - … IEEE Symposium on …, 2024‏ - ieeexplore.ieee.org
This paper investigates the digital security experiences of four at-risk user groups in
Germany, including older adults (70+), teenagers (14-17), people with migration …

Batman Hacked My Password: A {Subtitle-Based} Analysis of Password Depiction in Movies

MM Raphael, A Kanta, R Seebonn, M Dürmuth… - … Symposium on Usable …, 2024‏ - usenix.org
Password security is and will likely remain an issue that non-experts have to deal with. It is
therefore important that they understand the criteria of secure passwords and the …

Who comes up with this stuff? interviewing authors to understand how they produce security advice

L Neil, HS Ramulu, Y Acar, B Reaves - Nineteenth Symposium on …, 2023‏ - usenix.org
Users have a wealth of available security advice---far too much, according to prior work.
Experts and users alike struggle to prioritize and practice advised behaviours, negating both …

Formal Mental Models for Human-Centered Cybersecurity

AM Houser, ML Bolton - International Journal of Human–Computer …, 2024‏ - Taylor & Francis
Human users are increasingly recognized as a vector of cybersecurity attack. One problem
that contributes to this condition is the growing complexity of digital tools. Such complexity …

Investigating web service account remediation advice

L Neil, E Bouma-Sims, E Lafontaine, Y Acar… - … symposium on usable …, 2021‏ - usenix.org
Online web services are susceptible to account compromises where adversaries gain
access to a user's account. Once compromised, an account must be restored to its pre …