| 1. |
- Kävrestad, Joakim, 1989-, et al.
(author)
-
Assisting Users to Create Stronger Passwords Using ContextBased MicroTraining
- 2020
-
In: ICT Systems Security and Privacy Protection. - Cham : Springer. - 9783030582005 - 9783030582012 ; , s. 95-108
-
Conference paper (peer-reviewed)abstract
- In this paper, we describe and evaluate how the learning framework ContextBased MicroTraining (CBMT) can be used to assist users to create strong passwords. Rather than a technical enforcing measure, CBMT is a framework that provides information security training to users when they are in a situation where the training is directly relevant. The study is carried out in two steps. First, a survey is used to measure how well users understand password guidelines that are presented in different ways. The second part measures how using CBMT to present password guidelines affect the strength of the passwords created. This experiment was carried out by implementing CBMT at the account registration page of a local internet service provider and observing the results on user-created passwords. The results of the study show that users presented with passwords creation guidelines using a CBMT learning module do understand the password creation guidelines to a higher degree than other users. Further, the experiment shows that users presented with password guidelines in the form of a CBMT learning module do create passwords that are longer and more secure than other users. The assessment of password security was performed using the zxcvbn tool, developed by Dropbox, that measures password entropy.
|
|
| 2. |
- Kitkowska, Agnieszka, et al.
(author)
-
Facilitating Privacy Attitudes & Behaviors with Affective Visual Design
- 2020
-
In: ICT Systems Security and Privacy Protection. SEC 2020. IFIP Advances in Information and Communication Technology. - Cham : Springer. - 9783030582005 ; , s. 109-123
-
Conference paper (peer-reviewed)abstract
- We all too often must consent to information collection at an early stage of digital interactions, during application sign-up. Paying low attention to privacy policies, we are rarely aware of processing practices. Drawing on multidisciplinary research, we postulate that privacy policies presenting information in a way that triggers affective responses, together with individual characteristics, may influence privacy attitudes. Through an online quasi-experiment (N=88), we investigate how affect, illustration type, personality, and privacy concerns may influence end-users' willingness to disclose information and privacy awareness. Our results partially confirm these assumptions. We found that the affect may have an impact on privacy awareness, and stable psychological factors may influence disclosures. We discuss the applicability of our findings in interface design and in future research.
|
|
