Obstacles to the Adoption of Secure Communication Tools
Obstacles to the Adoption of Secure Communication Tools
复制标题
DOI：
10.1109/sp.2017.65
复制
发表时间：
2017-05
期刊：
影响因子：
--
通讯作者：
Ruba Abu-Salma;M. Sasse;Joseph Bonneau;A. Danilova;Alena Naiakshina;Matthew Smith
中科院分区：
文献类型：
--
作者：
Ruba Abu-Salma;M. Sasse;Joseph Bonneau;A. Danilova;Alena Naiakshina;Matthew Smith
计算机安全社区提倡广泛采用安全通信工具来对抗大规模监视。几种流行的个人通信工具（例如，WhatsApp、iMessage）都采用了端到端加密，许多新工具（例如，Signal、Telegram）都是以安全性为主要卖点推出的。然而，目前尚不清楚用户是否了解这些工具提供的保护，以及他们是否重视这种保护。在这项研究中，我们采访了60名参与者，了解他们使用不同通信工具的经验以及他们对工具安全属性的看法。我们发现，分散的用户群和不兼容的工具阻碍了安全通信工具的采用。此外，绝大多数参与者不理解端到端加密的基本概念，限制了他们采用安全工具的动机。我们确定了一些支持参与者信念的不正确的心理模型。
The computer security community has advocated widespread adoption of secure communication tools to counter mass surveillance. Several popular personal communication tools (e.g., WhatsApp, iMessage) have adopted end-to-end encryption, and many new tools (e.g., Signal, Telegram) have been launched with security as a key selling point. However it remains unclear if users understand what protection these tools offer, and if they value that protection. In this study, we interviewed 60 participants about their experience with different communication tools and their perceptions of the tools' security properties. We found that the adoption of secure communication tools is hindered by fragmented user bases and incompatible tools. Furthermore, the vast majority of participants did not understand the essential concept of end-to-end encryption, limiting their motivation to adopt secure tools. We identified a number of incorrect mental models that underpinned participants' beliefs.