Modifying Smartphone User Locking Behavior
Date: July 2013
Publication: Proceedings of the 9th Symposium On Usable Privacy and Security, SOUPS 2013
Source 1: http://cups.cs.cmu.edu/soups/2013/proceedings/a10_VanBruggen.pdf
Source 2: http://dx.doi.org/10.1145/2501604.2501614 - Subscription or payment required
Abstract or Summary:
With an increasing number of organizations allowing personal smart phones onto their networks, considerable security risk is introduced. The security risk is exacerbated by the tremendous heterogeneity of the personal mobile devices and their respective installed pool of applications. Furthermore, by virtue of the devices not being owned by the organization, the ability to authoritatively enforce organizational security polices is challenging. As a result, a critical part of organizational security is the ability to drive user security behavior through either on-device mechanisms or security awareness programs. In this paper, we establish a baseline for user security behavior from a population of over one hundred fifty smart phone users. We then systematically evaluate the ability to drive behavioral change via messaging centered on morality, deterrence, and incentives. Our findings suggest that appeals to morality are most effective over time, whereas deterrence produces the most immediate reaction. Additionally, our findings show that while a significant portion of users are securing their devices without prior intervention, it is difficult to influence change in those who do not.
Do you have additional information to contribute regarding this research paper? If so, please email firstname.lastname@example.org with the details.