NDSS 2025 - A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions скачать в хорошем качестве

NDSS 2025 - A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions

SESSION Session 1C: Privacy & Usability 1 Network and Distributed System Security (NDSS) Symposium 2025, 24 February – 28 February 2025 in San Diego, California. PAPER The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions https://www.ndss-symposium.org/wp-con... Rationales offer a method for app developers to convey their permission needs to users. While guidelines and recommendations exist on how to request permissions, developers have the creative freedom to design and phrase these rationales. In this work, we explore the characteristics of real-world rationales and how their building blocks affect users' permission decisions and their evaluation of those decisions. Through an analysis of 720 sentences and 428 screenshots of rationales from the top apps of Google Play, we identify the various phrasing and design elements of rationales. Subsequently, in a user study involving 960 participants, we explore how different combinations of phrasings impact users' permission decision-making process. By aligning our insights with established recommendations, we offer actionable guidelines for developers, aiming to make rationales a usable security instrument for users. AUTHORS Yusra Elbitar (CISPA Helmholtz Center for Information Security), Alexander Hart (CISPA Helmholtz Center for Information Security), Sven Bugiel (CISPA Helmholtz Center for Information Security) ABOUT NDSS The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies. https://www.ndss-symposium.org/ #NDSS #NDSS25 #NDSS2025 #InternetSecurity