Who Would Bob Blame? Factors in Blame Attribution in Cyberattacks Among the Non-Adopting Population in the Context of 2FA
Who Would Bob Blame? Factors in Blame Attribution in Cyberattacks Among the Non-Adopting Population in the Context of 2FA
复制标题
鲍勃会责怪谁？
DOI：
10.1109/compsac48688.2020.0-166
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Yusuf Albayram
中科院分区：
文献类型：
--
作者：
Sarah Marie Peck;Mohammad Maifi Hasan Khan;Md Abdullah Al Fahim;E. Coman;Theodore Jensen;Yusuf Albayram
这项研究的重点是确定导致个人责任感的因素，这些因素可以提高对不安全网络安全行为的理解，并指导研究针对非收养人群进行更有效的信息传递。为此，我们在 Amazon MTurk 上对 237 名美国成年人参与者进行了一项 2（账户类型）x2（使用场景）x2（消息类型）组间研究，并调查了非收养人群如何分配责任，以及在什么情况下他们将责任归咎于责任方（持有数据的软件公司、泄露数据的攻击者等）中的最终用户。我们发现用户主要要求服务提供商对违规行为负责，但他们认为这些公司不应该对用户实施更严格的安全策略。结果表明，人们确实要求最终用户在发生违规事件时对其行为负责，特别是当用户的行为影响他人时。本文讨论了我们的研究结果对风险沟通的影响。
This study focuses on identifying the factors contributing to a sense of personal responsibility that could improve understanding of insecure cybersecurity behavior and guide research toward more effective messaging targeting non-adopting populations. Towards that, we ran a 2(account type) x2(usage scenario) x2(message type) between-group study with 237 United States adult participants on Amazon MTurk, and investigated how the non-adopting population allocates blame, and under what circumstances they blame the end user among the parties who hold responsibility: the software companies holding data, the attackers exposing data, and others. We find users primarily hold service providers accountable for breaches but they feel the same companies should not enforce stronger security policies on users. Results indicate that people do hold end users accountable for their behavior in the event of a breach, especially when the users' behavior affects others. Implications of our findings in risk communication is discussed in the paper.
使用科幻小说来表达用户对隐私的思考
DOI：
10.1145/3123024.3123080
发表时间：
2017
期刊：
Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2017 ACM International Symposium on Wearable Computers
影响因子：
--
作者：
Wong, Richmond Y.;Mulligan, Deirdre K.;Chuang, John
通讯作者：
Chuang, John