2016/10/12 by Der-Yeuan Yu, Yu, Der-Yeuan, Elizabeth Stobert +6
Computer Science · Social Sciences · #Computers and Society (cs.CY) #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Privacy, Security, and Data Protection #Spam and Phishing Detection #User Authentication and Security Systems #cs.CR #cs.CY
paper · pdf · doi:10.48550/arxiv.1610.03647
13 pages, 4 figures, 7 tables. Published at the 2018 NDSS Workshop on Usable Security (USEC)
openalex publication_date 2016/10/12 · arxiv created 2018/03/01 · arxiv updated 2018/03/02 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Authenticating websites is an ongoing problem for users. Recent proposals have suggested strengthening current server authentication methods by incorporating website location as a comprehensible additional trust factor. In this work, we explore users' acceptance of location information and how it affects decision-making for security and privacy. We conducted a series of qualitative interviews to learn how location can be integrated into users' decision-making for security, and we designed a security indicator to alert the user to changes in website locations. We evaluated our tool in a 44-participant user study and found that users were less likely to perform security-sensitive tasks when alerted to location changes. Our results suggest that website location can be used as an effective indicator for users' security assessments.