Evaluating In-Workflow Messages for Improving Mental Models of End-to-End Encryption
Omer Akgul, Wei Bai, Shruti Das, Michelle L. Mazurek
摘要
As large messaging providers increasingly adopt end-to-end encryption, private communication is readily available to more users than ever before. However, misunderstandings of end-to-end encryption's benefits and shortcomings limit people's ability to make informed choices about how and when to use these services. This paper explores the potential of using short educational messages, built into messaging workflows, to improve users' functional mental models of secure communication. A preliminary survey study (n=461) finds that such messages, when used in isolation, can effectively improve understanding of several key concepts. We then conduct a longitudinal study (n=61) to test these messages in a more realistic environment: embedded into a secure messaging app. In this second study, we do not find statistically significant evidence of improvement in mental models; however, qualitative evidence from participant interviews suggests that if made more salient, such messages could have potential to improve users' understanding.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper7
- 27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire UniversityChristian Stransky, Oliver Wiese, Volker Roth, Yasemin Acar 等S&P 2022 · 被引用 27 次
- Investigating Influencer VPN Ads on YouTubeOmer Akgul, Richard Roberts, Moses Namara, Dave Levin 等S&P 2022 · 被引用 27 次
- A Decade of Privacy-Relevant Android App Reviews: Large Scale TrendsOmer Akgul, Sai Teja Peddinti, Nina Taft, Michelle L. Mazurek 等USENIX Security 2024 · 被引用 14 次
- "Did They F***ing Consent to That?": Safer Digital Intimacy via Proactive Protection Against Image-Based Sexual AbuseLucy Qin, Vaughn Hamilton, Sharon Wang, Yigit Aydinalp 等USENIX Security 2024 · 被引用 14 次
- Comprehension from Chaos: Towards Informed Consent for Private ComputationBailey Kacsmar, Vasisht Duddu, Kyle Tilbury, Blase Ur 等CCS 2023 · 被引用 2 次
它引用的顶会 Paper2
- Obstacles to the Adoption of Secure Communication ToolsRuba Abu-Salma, M. Angela Sasse, Joseph Bonneau, Anastasia Danilova 等S&P 2017 · 被引用 170 次
- Exploring Nudge Designs to Help Adolescent SNS Users Avoid Privacy and Safety ThreatsHiroaki Masaki, Kengo Shibata, Shui Hoshino, Takahiro Ishihama 等CHI 2020 · 被引用 62 次
相关 Paper
- "If HTTPS Were Secure, I Wouldn't Need 2FA" - End User and Administrator Mental Models of HTTPSKatharina Krombholz, Karoline Busse, Katharina Pfeffer, Matthew Smith 等S&P 2019 · 被引用 105 次
- The Impact of Risk Appeal Approaches on Users' Sharing Confidential InformationElham Al Qahtani, Peter Story, Mohamed ShehabCHI 2024
- Security at the End of the Tunnel: The Anatomy of VPN Mental Models Among Experts and Non-Experts in a Corporate ContextVeroniek Binkhorst, Tobias Fiebig, Katharina Krombholz, Wolter Pieters 等USENIX Security 2022
- Cryptographic Deniability: A Multi-perspective Study of User Perceptions and ExpectationsTarun Kumar Yadav, Devashish Gosain, Kent E. SeamonsUSENIX Security 2023
- "All of them claim to be the best": Multi-perspective study of VPN users and VPN providersReethika Ramesh, Anjali Vyas, Roya EnsafiUSENIX Security 2023
