Weighing Context and Trade-offs: How Suburban Adults Selected Their Online Security Posture
Weighing Context and Trade-offs: How Suburban Adults Selected Their Online Security Posture
复制标题
权衡背景和权衡：郊区成年人如何选择他们的在线安全态势
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
K. Seamons
中科院分区：
文献类型：
--
作者：
Scott Ruoti;T. Monson;Justin Wu;D. Zappala;K. Seamons
了解人们在面对复杂安全情况时的行为对于设计可用的安全工具至关重要。为了更好地了解用户对数字生活的看法以及他们如何管理自己的在线安全状况，我们对来自华盛顿州郊区的大多数中年父母进行了一系列23次半结构化访谈。使用扎根理论方法，我们分析了访谈数据，发现参与者选择他们的安全态势是基于互联网提供的巨大价值，以及他们认为没有任何技术组合可以使他们完全安全的信念。在此背景下，用户有一个四阶段的过程来确定采取哪些安全措施：学习，风险评估，影响估计，权衡各种应对策略。我们的结果还显示，大多数参与者了解对称加密的基本原理。我们发现，参与者对基于浏览器的TLS指标的误解导致了不安全的行为，而加密电子邮件的持久性导致参与者怀疑它是安全的。最后，我们讨论了可能的反应，这项研究和未来的研究途径。
Understanding how people behave when faced with complex security situations is essential to designing usable security tools. To better understand users’ perceptions of their digital lives and how they managed their online security posture, we conducted a series of 23 semi-structured interviews with mostly middle-aged parents from suburban Washington state. Using a grounded theory methodology, we analyzed the interview data and found that participants chose their security posture based on the immense value the Internet provides and their belief that no combination of technology could make them perfectly safe. Within this context, users have a four-stage process for determining which security measures to adopt: learning, evaluation of risks, estimation of impact, and weighing trade-offs to various coping strategies. Our re-sults also revealed that a majority of participants understand the basic principles of symmetric encryption. We found that participants’ misconceptions related to browser-based TLS indicators lead to insecure behavior, and it is the permanence of encrypted email that causes participants to doubt that it is secure. We conclude with a discussion of possible responses to this research and avenues for future research.