Attention and past behavior, not security knowledge, modulate users' decisions to login to insecure websites
Attention and past behavior, not security knowledge, modulate users' decisions to login to insecure websites
复制标题
DOI：
10.1108/ics-01-2016-0002
复制
发表时间：
2016-01-01
影响因子：
1.4
通讯作者：
Bertenthal, Bennett I.
中科院分区：
文献类型：
--
作者：
Kelley, Timothy;Bertenthal, Bennett I.
目的-现代浏览器旨在告知用户登录网站是否安全，但大多数用户并不知道这些信息，甚至有时会忽略这些信息。这项研究旨在评估用户对通过浏览器指示器传达的安全警告的了解程度，以及他们的在线决策遵循这些知识的可能性。设计/方法/方法-来自亚马逊的机械土耳其人的参与者访问了一系列安全和不安全的网站，并尽可能快、尽可能准确地决定登录是否安全。然后，一项在线调查被用来评估他们的信息安全知识。发现-信息安全知识不一定能很好地预测是否登录网站的决定。此外，这些决定受到对安全指标的关注、对网站的熟悉度以及由响应时间和准确性决定的奖金所带来的心理社会压力的影响。实际影响--即使是具有安全知识的人也无法在浏览网络时得出关于数字风险的必要结论。通过日常使用，用户被教育忽略推荐的安全指标。原创性/价值-这项研究代表了一种通过将速度和准确性货币化来诱使参与者从事危险行为的新方法。这种方法可以广泛地用作研究高风险环境的一种方式，而不会让参与者面临风险。
Purpose - Modern browsers are designed to inform users as to whether it is secure to login to a website, but most users are not aware of this information and even those who are sometimes ignore it. This study aims to assess users' knowledge of security warnings communicated via browser indicators and the likelihood that their online decision-making adheres to this knowledge.Design/methodology/approach - Participants from Amazon's Mechanical Turk visited a series of secure and insecure websites and decided as quickly and as accurately as possible whether it was safe to login. An online survey was then used to assess their knowledge of information security.Findings - Knowledge of information security was not necessarily a good predictor of decisions regarding whether to sign-in to a website. Moreover, these decisions were modulated by attention to security indicators, familiarity of the website and psychosocial stress induced by bonus payments determined by response times and accuracy.Practical implications - Even individuals with security knowledge are unable to draw the necessary conclusions about digital risks when browsing the web. Users are being educated through daily use to ignore recommended security indicators.Originality/value - This study represents a new way to entice participants into risky behavior by monetizing both speed and accuracy. This approach could be broadly useful as a way to study risky environments without placing participants at risk.