NDLI: Dimensions of Risk in Mobile Applications: A User Study

Please wait, while we are loading the content...

DBMask: Fine-Grained Access Control on Encrypted Relational Databases

StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications

Collecting, Analyzing and Responding to Enterprise Scale DNS Events

CoinParty: Secure Multi-Party Mixing of Bitcoins

Content Level Access Control for OpenStack Swift Storage

BigGate: Access Control Framework for Outsourced Key-Value Stores

Identifying and Understanding Self-Checksumming Defenses in Software

Aligning Security and Business Objectives for Process-Aware Information Systems

A Dynamic Approach to Detect Anomalous Queries on Relational Databases

Big Data Security and Privacy

Towards Server-side Repair for Erasure Coding-based Distributed Storage Systems

Tunably-Oblivious Memory: Generalizing ORAM to Enable Privacy-Efficiency Tradeoffs

Differentially-Private Mining of Moderately-Frequent High-Confidence Association Rules

Dimensions of Risk in Mobile Applications: A User Study

The BORG: Nanoprobing Binaries for Buffer Overreads

Pleco and Plectron -- Two Provably Secure Password Hashing Algorithms

Virtual Resource Orchestration Constraints in Cloud Infrastructure as a Service

Robust Fingerprinting for Relocatable Code

Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right

Combining ORAM with PIR to Minimize Bandwidth Costs

HideM: Protecting the Contents of Userspace Memory in the Face of Disclosure Vulnerabilities

DetAnom: Detecting Anomalous Database Transactions by Insiders

SemaDroid: A Privacy-Aware Sensor Management Framework for Smartphones

How Your Phone Camera Can Be Used to Stealthily Spy on You: Transplantation Attacks against Android Camera Service

Secure Information and Resource Sharing in Cloud

Privacy-Preserving Scanning of Big Content for Sensitive Data Exposure with MapReduce

Software-Based Protection against Changeware

Database Fragmentation with Confidentiality Constraints: A Graph Search Approach

Can't You Hear Me Knocking: Identification of User Actions on Android Apps via Traffic Analysis

The Limits of the Trade-Off Between Query-Anonymity and Communication-Cost in Wireless Sensor Networks

On the Character of Phishing URLs: Accurate and Robust Statistical Learning Classifiers

One Thing Leads to Another: Credential Based Privilege Escalation

Distributed Search over Encrypted Big Data

Securing ARP From the Ground Up

Toward De-Anonymizing Bitcoin by Mapping Users Location

Epidemic Behavior of Negative Users in Online Social Sites

Rapid Screening of Transformed Data Leaks with Efficient Algorithms and Parallel Computing

Information Sharing and User Privacy in the Third-party Identity Management Landscape

Practical Exploit Generation for Intent Message Vulnerabilities in Android

A Network Security Game Model

CryptStream: Cryptographic Access Controls for Streaming Data

ABSS: An Attribute-based Sanitizable Signature for Integrity of Outsourced Database with Public Cloud

Dimensions of Risk in Mobile Applications: A User Study

Content Provider	ACM Digital Library
Author	Li, Ninghui Yu, Ting Jorgensen, Zach Chen, Jing Gates, Christopher S. Proctor, Robert W.
Abstract	Mobile platforms, such as Android, warn users about the permissions an app requests and trust that the user will make the correct decision about whether or not to install the app. Unfortunately many users either ignore the warning or fail to understand the permissions and the risks they imply. As a step toward developing an indicator of risk that decomposes risk into several categories, or dimensions, we conducted two studies designed to assess the dimensions of risk deemed most important by experts and novices. In Study 1, semi-structured interviews were conducted with 19 security experts, who also performed a card sorting task in which they categorized permissions. The experts identified three major risk dimensions in the interviews (personal information privacy, monetary risk, and device availability/stability), and a forth dimension (data integrity) in the card sorting task. In Study 2, 350 typical Android users, recruited via Amazon Mechanical Turk, filled out a questionnaire in which they (a) answered questions concerning their mobile device usage, (b) rated how often they considered each of several types of information when installing apps, (c) indicated what they considered to be the biggest risk associated with installing an app on their mobile device, and (d) rated their concerns with regard to specific risk types and about apps having access to specific types of information. In general, the typical users' concerns were similar to those of the security experts. The results of the studies suggest that risk information should be organized into several risk types that can be better understood by users and that a mid-level risk summary should incorporate the dimensions of personal information privacy, monetary risk, device availability/stability risk and data integrity risk.
Starting Page	49
Ending Page	60
Page Count	12
File Format	PDF
ISBN	9781450331913
DOI	10.1145/2699026.2699108
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-03-02
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Smartphones Risk Mobile security Android
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Android permissions: user attention, comprehension, and behavior

RiskMon: continuous and automated risk assessment of mobile applications

A Case Study of Automating User Experience-Oriented Performance Testing on Smartphones

Designing Android Marshmallow volume controls: a user experience case study

Helping Developers Construct Secure Mobile Applications

Applying CIAM mobile methodology: a case study for smartphones

Reconciling mobile app privacy and usability on smartphones: could user privacy profiles help?

Policy-based security assessment of mobile end-user devices an alternative to mobile device management solutions for Android smartphones

Network Security Challenges in Android Applications

Dimensions of Risk in Mobile Applications: A User Study

Similar Documents

Android permissions: user attention, comprehension, and behavior

RiskMon: continuous and automated risk assessment of mobile applications

A Case Study of Automating User Experience-Oriented Performance Testing on Smartphones

Designing Android Marshmallow volume controls: a user experience case study

Helping Developers Construct Secure Mobile Applications

Applying CIAM mobile methodology: a case study for smartphones

Reconciling mobile app privacy and usability on smartphones: could user privacy profiles help?

Policy-based security assessment of mobile end-user devices an alternative to mobile device management solutions for Android smartphones

Network Security Challenges in Android Applications

Dimensions of Risk in Mobile Applications: A User Study