Post on 17-Jan-2017
ta
User Study
PopJART: • Designed research proto- type tool that identifies
attack websites with high probability
• PopJART is an example security software that helps identify malicious websites.
• Designing user interface routine to enhance risk awareness and self-efficacy .
Interview: • In Part 1, participants
answered self-efficacy and perceived risk questions.
• In Part 2, participants viewed 8 websites and guessed whether those websites were safe or malicious and what criteria they used to make the decision.
• In Part 3, PopJART was explained and they revisited the websites. After participants answered PopJART adoption questions.
http://www.flickr.com/photos/mookies/90547700/lightbox/
http://www.oprah.com/health/Your-Questions-Answered/5
Communicating Risk in Internet Security and
Privacy (CRISP)
Health Benefit Model (HBM): In this model, a target population’s likelihood to change their behavior is based on: • perceived susceptibility
(perception of risk) • perceived severity • perceived benefits • perceived barriers (cues to
action) • self-efficacy Security software interfaces should lead to behavior change. Why a Marginalized Community?: • Understanding the challenges
in designing the user interfaces of security software
• Targeting populations with • low-proficiency • limited access to
computers and the internet
• socio-economic hardship.
Participants: • Advertised in a public
computer lab run by a non-profit organization in a low-income neighborhood in SF.
• Most of lab users live on social security and have low computer proficiency.
Security software adoption
Attacks on the Internet are highly sophisticated and hard for an average user to identify. Using security software is strongly
recommended.
How perceived risk and self-efficacy affect users’ behavior regarding Internet security
“I’m extremely confident that I don’t know [how often I visit
malicious websites].” Low self-efficacy affects perceived risk.
80% of those who thought they could differentiate safe and malicious websites said they would adopt PopJART. • Better self-efficacy may
encourage security software adoption.
77% of those who thought
malicious websites could cause harm just by visiting said
they would adopt PopJART.
Healthy User Behavior regarding
Internet Security
Perceived risk
How susceptible I am to attacks on the Internet? The higher it is,
the user is more likely to take cautions.
Self-efficacy
Am I competent to behave properly when I visit a
malicious website? The higher self-efficacy is, the better.
EJ Jung, Evelyn Y. Ho & Mark Sinclair University of San Francisco
Hyewon Chung Chungnam National University
Ongoing research with USF Undergraduates
In our investigation we are observing a lower adoption rate. We hypothesize that participants with high self-efficacy and low perceived risk might be less likely to adopt the software.
Perceived Risk and Self-Efficacy Regarding Internet Security in a Marginalized Community