City governments are leveraging digital platforms to increase engagement from the community and make services more accessible to their constituents. These platforms allow citizens …
We address composition of access control schemes which include both a model to encode authorizations, and an administrative model to encode the manner in which such authorizations …
Users act as valuable ``citizen sensors'' by reporting issues in public spaces enabling cities to address infrastructure problems in a timely manner. Municipal web sites are one …
Users need accurate and relevant guidance about phishing to take the right action on specific cases. This study investigates the effectiveness of guidance based on features …
A novel framework designed to designed to extract contextual information from phishing emails. Our focus is on human-centric features, which are often overlooked in traditional …
While installing patches (updates) quickly is important for security, many system administrators do not have access to key resources like dedicated testing environments to ensure …
Consent dialogs are in theory there to provide users with choices. In this study we look at the impact choosing different options has on the cookies set. We also analyze the number …
Twitter accounts are public by default, but Twitter gives the option to create protected accounts, where only approved followers can see their tweets. The publicly visible …
Smart speakers in multi-user spaces, such as Amazon Echos, introduce risks to both owners and anyone sharing the space. They store voice recordings of user requests, and anyone in …
When people report phishing emails they sometimes say something along with the report, such as asking a question, highlighting an aspect of the phishing, or asking for guidance. In …
Reliably recruiting participants with programming skills is an ongoing challenge for empirical studies involving software development technologies, often leading to the use of …
Changing a Twitter account's privacy setting between public and protected changes the visibility of past tweets. By inspecting the privacy setting of more than 100K Twitter users …
Evaluating interactive systems often requires researchers to invite user study participants to the lab. However, corresponding evaluations often lack realism and participants are …
Choice framing impacts app developers’ decisions about the settings of mobile advertisements which in turn impacts their users’ privacy. We anticipate that framing and nudging have …
Software development teams are responsible for making and implementing software design decisions that directly impact end-user privacy, a challenging task to do well. Privacy …
Judging the safety of a URL is something that even security experts struggle to do accurately without additional information. In this work, we aim to make experts’ tools accessible …
Smart speakers, such as Amazon Alexa, are increasingly present in multi-user households leading to questions about privacy and consent espeically for those who do not directly own …
Avertising networks enable developers to create revenue, but using them potentially impacts user privacy and requires developers to make legal decisions. To understand what privacy …
Common anti-phishing advice tells users to mouse over links, look at the URL, and compare to the expected destination, implicitly assuming that they are able to read the URL. To …
We analyse Stack Overflow to understand challenges and confusions developers face while dealing with privacy-related topics. Identified topics include privacy policies, privacy …
Organizations often provide anti-phishing guidance to their customers and the Internet community at large. We analyzed 94 anti-phishing webpages from eight different countries and …
People share a wide variety of information on Twitter, including the events in their lives, without understanding the size of their audience. While some of these events can be …
Software developers are key players in the security ecosystem as they produce code that runs on millions of devices. Yet we continue to see insecure code being developed and …
Topics in Computer Security, such as firewalls, can seem inaccessible or very difficult to beginners. That perceived inaccessibility is a serious problem at a time when countries …
Online safety regularly depends on users’ ability to know either where a URL is likely to lead or identify when they are on a site other than they expect. Unfortunately, the …
Analysis of the update experiences of 307 survey participants to better understand the barriers and incentives people experience when updating software. Using content analysis we …
The goal of the research study reported here was to investigate policy authors' ability to take descriptions of changes to policy situations and author high-quality, complete …
Managing large sets of access-control rules is a complex task for security administrators. Each addition, deletion or modification of a rule causes many potential and unknown side …