OTO: Online trust oracle for user-centric trust establishment

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 391-403

  Kim, Tiffany Hyun Jin ^a   Gupta, Payas ^b   Han, Jun ^a   Owusu, Emmanuel ^a   Hong, Jason ^a   Perrig, Adrian ^a   Gao, Debin ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b SINGAPORE MANAGEMENT UNIVERSITY   (Singapore)

Author keywords

Human factors; Software download; Trust evidence; Trust validation for uncertified software; User interfaces for security

Indexed keywords

EXPERT ELICITATION; MALWARES; ONLINE TRUST; SOFTWARE DOWNLOADS; TRUST ESTABLISHMENT; TRUST EVIDENCE; USER STUDY; USER-CENTRIC;

COMPUTER CRIME; HUMAN ENGINEERING; INTERNET; USER INTERFACES;

NETWORK SECURITY;

EID: 84869390901     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2382196.2382239     Document Type: Conference Paper

References (20)

1. Microsoft Security Intelligence Report. http://download.microsoft.com/ download/0/3/3/0331766E-3FC4-44E5-B1CA-2BDEB58211B8/Microsoft-Security- Intelligence-Report-volume-11-English.pdf, 2011.
2. Sophos Security Threat Report 2011. http://www.sophos.com/sophos/docs/ eng/papers/sophos-security-threat-report-2011-wpna.pdf, 2011.
3. Sophos Security Threat Report 2012. http://www.sophos.com/medialibrary/ PDFs/other/SophosSecurityThreatReport2012.pdf, 2012.
4. This Is Watson. IBM Journals of Research and Development, May/Jul 2012.
5. P. Ayyavu and C. Jensen. Integrating User Feedback with Heuristic Security and Privacy Management Systems. In Proceedings of Proceedings of the annual SIGCHI conference on Human factors in computing systems, 2011.
6. C. Bravo-Lillo, L. F. Cranor, J. S. Downs, and S. Komanduri. Bridging the Gap in Computer Security Warnings. IEEE Security and Privacy, 2011.
7. J. C. Brustoloni and R. Villamarin-Salomon. Improving Security Decisions with Polymorphic and Audited Dialogs. In Proceedings of Symposium on Usable Privacy and Security (SOUPS), 2007.
8. R. Dhamija, J. Tygar, and M. Hearst. Why Phishing Works. In Proceedings of the annual SIGCHI conference on Human factors in computing systems, 2006.
9. J. S. Downs, M. B. Holbrook, and L. F. Cranor. Decision Strategies and Susceptibility to Phishing. In Proceedings of Symposium on Usable Privacy and Security (SOUPS), 2006.
10. S. Egelman. Trust Me: Design Patterns for Constructing Trustworthy Trust Indicators. PhD thesis, Carnegie Mellon University, 2009.
11. S. Egelman, L. F. Cranor, and J. Hong. You've been warned: an empirical study of the effectiveness of web browser phishing warnings. In Proceedings of the 26th annual SIGCHI conference on Human factors in computing systems, 2008.
12. B. Fogg, C. Soohoo, D. R. Danielson, L. Marable, J. Stanford, and E. R. Tauber. How Do Users Evaluate the Credibility of Web Sites? A Study with Over 2,500 Participants. In Proceedings of the Conference on Designing for User Experiences (DUX), 2003.
13. C. Kuo. Reduction of End User Errors in the Design of Scalable, Secure Communication. PhD thesis, Carnegie Mellon University, 2008.
14. S. Motiee. Towards Supporting Users in Assessing the Risk in Privilege Elevation. Master's thesis, The University of British Columbia, 2011.
15. P. O'Kane, S. Sezer, and K. McLaughlin. Obfuscation: The Hidden Malware. IEEE Security & Privacy Magazine, Sept. 2011.
16. J. Schwarz and M. R. Morris. Augmenting web pages and search results to help people find trustworthy information online. In Proceedings of the annual SIGCHI conference on Human factors in computing systems, 2011.
17. J. Sunshine, S. Egelman, H. Almuhimedi, N. Atri, and L. F. Cranor. Crying wolf: an empirical study of ssl warning effectiveness. In Proceedings of the 18th conference on USENIX security symposium, 2009.
18. A. Vishwanath, T. Herath, R. Chen, J. Wang, and H. R. Rao. Why do people get phished? Testing individual differences in phishing vulnerability within an integrated, information processing model. Decision Support Systems, 2011.
19. R. Wash. Folk Models of Home Computer Security. In Proceedings of the Symposium on Usable Privacy and Security (SOUPS), 2010.
20. M. S. Wogalter. Handbook of Warnings, chapter Communication-Human Information Processing (C-HIP) Model, pages 51-61. Lawrence Erlbaum Associates, 2006.