On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications

Vlasta Stavova; Vashek Matyas; Mike Just

doi:10.14722/eurousec.2016.23003

On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications

Vlasta Stavova, Vashek Matyas, Mike Just

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

174 Downloads (Pure)

Abstract

We conducted a large-scale online study with 26,000 software installations during which we asked user (participants) whether they wanted to enable or disable the detection of Potentially Unwanted Applications (PUAs – potentially malicious software, such as adware or spyware). PUAs are notoriously difficult to manage, e.g., legal challenges can preclude default options that could otherwise be set for PUAs detection or removal. Our study was performed with an IT security software provider (ESET) who gave us access to the participants (antivirus product beta users). We used a between-subjects design with 15 conditions (a starting-point control interface, and 14 new "warning" interfaces). Despite the fact that many software companies (e.g., Microsoft, AVAST, AVG, McAfee, Kaspersky Lab) are struggling with PUAs detection, there are few studies focused on this topic.

Our results indicate a strong desire for PUAs detection by users. In particular, enabling PUAs detection was chosen by 74.5% of our participants for our initial control interface. Further, a modified interface in which the option to enable PUAs detection was presented first resulted in 89.8% of participants
choosing to enable PUAs detection (a statistically significant increase from the control).

Original language	English
Title of host publication	Proceedings of The 1st European Workshop on Usable Security
Publisher	Internet Society
ISBN (Electronic)	1-891562-45-2
DOIs	https://doi.org/10.14722/eurousec.2016.23003
Publication status	Published - Jul 2016
Event	1st European Workshop on Usable Security - Darmstadt, Germany Duration: 18 Jul 2016 → 18 Jul 2016 https://eurousec.secuso.org/2016/

Conference

Conference	1st European Workshop on Usable Security
Abbreviated title	EuroUSEC 2016
Country/Territory	Germany
City	Darmstadt
Period	18/07/16 → 18/07/16
Internet address	https://eurousec.secuso.org/2016/

ASJC Scopus subject areas

Human-Computer Interaction

Access to Document

10.14722/eurousec.2016.23003

EUsec16_final
Permission to freely reproduce all or part of this paper for noncommercial purposes is granted provided that copies bear this notice and the full citation on the first page. Reproduction for commercial purposes is strictly prohibited without the prior written consent of the Internet Society, the first-named author (for reproduction of an entire paper only), and the author’s employer if the paper was prepared within the scope of employment. EuroUSEC ’16, 18 July 2016, Darmstadt, Germany Copyright 2016 Internet Society,
Accepted author manuscript, 828 KB

Cite this

@inproceedings{38aa9bf514ae4ee4ae068e9c00de0eff,

title = "On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications",

abstract = "We conducted a large-scale online study with 26,000 software installations during which we asked user (participants) whether they wanted to enable or disable the detection of Potentially Unwanted Applications (PUAs – potentially malicious software, such as adware or spyware). PUAs are notoriously difficult to manage, e.g., legal challenges can preclude default options that could otherwise be set for PUAs detection or removal. Our study was performed with an IT security software provider (ESET) who gave us access to the participants (antivirus product beta users). We used a between-subjects design with 15 conditions (a starting-point control interface, and 14 new {"}warning{"} interfaces). Despite the fact that many software companies (e.g., Microsoft, AVAST, AVG, McAfee, Kaspersky Lab) are struggling with PUAs detection, there are few studies focused on this topic.Our results indicate a strong desire for PUAs detection by users. In particular, enabling PUAs detection was chosen by 74.5% of our participants for our initial control interface. Further, a modified interface in which the option to enable PUAs detection was presented first resulted in 89.8% of participantschoosing to enable PUAs detection (a statistically significant increase from the control).",

author = "Vlasta Stavova and Vashek Matyas and Mike Just",

note = "DOI does not work 23/8/2016; 1st European Workshop on Usable Security, EuroUSEC 2016 ; Conference date: 18-07-2016 Through 18-07-2016",

year = "2016",

month = jul,

doi = "10.14722/eurousec.2016.23003",

language = "English",

booktitle = "Proceedings of The 1st European Workshop on Usable Security",

publisher = "Internet Society",

url = "https://eurousec.secuso.org/2016/",

}

TY - GEN

T1 - On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications

AU - Stavova, Vlasta

AU - Matyas, Vashek

AU - Just, Mike

N1 - DOI does not work 23/8/2016

PY - 2016/7

Y1 - 2016/7

N2 - We conducted a large-scale online study with 26,000 software installations during which we asked user (participants) whether they wanted to enable or disable the detection of Potentially Unwanted Applications (PUAs – potentially malicious software, such as adware or spyware). PUAs are notoriously difficult to manage, e.g., legal challenges can preclude default options that could otherwise be set for PUAs detection or removal. Our study was performed with an IT security software provider (ESET) who gave us access to the participants (antivirus product beta users). We used a between-subjects design with 15 conditions (a starting-point control interface, and 14 new "warning" interfaces). Despite the fact that many software companies (e.g., Microsoft, AVAST, AVG, McAfee, Kaspersky Lab) are struggling with PUAs detection, there are few studies focused on this topic.Our results indicate a strong desire for PUAs detection by users. In particular, enabling PUAs detection was chosen by 74.5% of our participants for our initial control interface. Further, a modified interface in which the option to enable PUAs detection was presented first resulted in 89.8% of participantschoosing to enable PUAs detection (a statistically significant increase from the control).

AB - We conducted a large-scale online study with 26,000 software installations during which we asked user (participants) whether they wanted to enable or disable the detection of Potentially Unwanted Applications (PUAs – potentially malicious software, such as adware or spyware). PUAs are notoriously difficult to manage, e.g., legal challenges can preclude default options that could otherwise be set for PUAs detection or removal. Our study was performed with an IT security software provider (ESET) who gave us access to the participants (antivirus product beta users). We used a between-subjects design with 15 conditions (a starting-point control interface, and 14 new "warning" interfaces). Despite the fact that many software companies (e.g., Microsoft, AVAST, AVG, McAfee, Kaspersky Lab) are struggling with PUAs detection, there are few studies focused on this topic.Our results indicate a strong desire for PUAs detection by users. In particular, enabling PUAs detection was chosen by 74.5% of our participants for our initial control interface. Further, a modified interface in which the option to enable PUAs detection was presented first resulted in 89.8% of participantschoosing to enable PUAs detection (a statistically significant increase from the control).

U2 - 10.14722/eurousec.2016.23003

DO - 10.14722/eurousec.2016.23003

M3 - Conference contribution

BT - Proceedings of The 1st European Workshop on Usable Security

PB - Internet Society

T2 - 1st European Workshop on Usable Security

Y2 - 18 July 2016 through 18 July 2016

ER -

On the impact of warning interfaces for enabling the detection of Potentially Unwanted Applications

Abstract

Conference

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this