"I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts

Sven  Hammann; Michael Crabb; Saša Radomirović; Ralf Sasse; David Basin

doi:10.1145/3491102.3502125

"I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts

Sven Hammann
, Michael Crabb
, Saša Radomirović
, Ralf Sasse
, David Basin

Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

6 Citations (Scopus)

541 Downloads (Pure)

Abstract

A person's online security setup is tied to the security of their individual accounts. Some accounts are particularly critical as they provide access to other online services. For example, an email account can be used for external account recovery or to assist with single-sign-on. The connections between accounts are specific to each user's setup and create unique security problems that are difficult to remedy by following generic security advice. In this paper, we develop a method to gather and analyze users' online accounts systematically. We demonstrate this in a user study with 20 participants and obtain detailed insights on how users' personal setup choices and behaviors affect their overall account security. We discuss concrete usability and privacy concerns that prevented our participants from improving their account security. Based on our findings, we provide recommendations for service providers and security experts to increase the adoption of security best practices.

Original language	English
Title of host publication	CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems
Editors	Simone Barbosa, Cliff Lampe, Caroline Appert, David A. Shamma, Steven Drucker, Julie Williamson, Koji Yatani
Place of Publication	New York
Publisher	Association for Computing Machinery
Number of pages	13
ISBN (Electronic)	9781450391573
DOIs	https://doi.org/10.1145/3491102.3502125
Publication status	Published - 29 Apr 2022
Event	CHI Conference on Human Factors in Computing Systems - New Orleans, United States Duration: 13 Apr 2022 → 14 Apr 2022 https://chi2022.acm.org/

Conference

Conference	CHI Conference on Human Factors in Computing Systems
Country/Territory	United States
City	New Orleans
Period	13/04/22 → 14/04/22
Internet address	https://chi2022.acm.org/

Keywords

Security and privacy
aspects of security and privacy
Human-centered computing
User studies
Account Graph
security setup
user interviews

ASJC Scopus subject areas

Software
Human-Computer Interaction
Computer Graphics and Computer-Aided Design

Access to Document

10.1145/3491102.3502125

Author Accepted Manuscript
This is the author’s version of the work. It is posted here for your personal use. Not for redistribution. The definitive Version of Record was published in CHI Conference on Human Factors in Computing Systems (CHI ’22), April 29-May 5, 2022, New Orleans, LA, USA, https://doi.org/10.1145/3491102.3502125.
Accepted author manuscript, 530 KB

Cite this

Hammann, S., Crabb, M., Radomirović, S., Sasse, R., & Basin, D. (2022). "I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts. In S. Barbosa, C. Lampe, C. Appert, D. A. Shamma, S. Drucker, J. Williamson, & K. Yatani (Eds.), CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems Article 620 Association for Computing Machinery. https://doi.org/10.1145/3491102.3502125

Hammann, Sven ; Crabb, Michael ; Radomirović, Saša et al. / "I’m Surprised So Much Is Connected" : A Study on Users’ Online Accounts. CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems. editor / Simone Barbosa ; Cliff Lampe ; Caroline Appert ; David A. Shamma ; Steven Drucker ; Julie Williamson ; Koji Yatani. New York : Association for Computing Machinery, 2022.

@inproceedings{7183c975934445878d7c1cada4ab6f7b,

title = "{"}I{\textquoteright}m Surprised So Much Is Connected{"}: A Study on Users{\textquoteright} Online Accounts",

abstract = "A person's online security setup is tied to the security of their individual accounts. Some accounts are particularly critical as they provide access to other online services. For example, an email account can be used for external account recovery or to assist with single-sign-on. The connections between accounts are specific to each user's setup and create unique security problems that are difficult to remedy by following generic security advice. In this paper, we develop a method to gather and analyze users' online accounts systematically. We demonstrate this in a user study with 20 participants and obtain detailed insights on how users' personal setup choices and behaviors affect their overall account security. We discuss concrete usability and privacy concerns that prevented our participants from improving their account security. Based on our findings, we provide recommendations for service providers and security experts to increase the adoption of security best practices.",

keywords = "Security and privacy, aspects of security and privacy, Human-centered computing, User studies, Account Graph, security setup, user interviews",

author = "Sven Hammann and Michael Crabb and Sa{\v s}a Radomirovi{\'c} and Ralf Sasse and David Basin",

note = "Copyright: {\textcopyright}2022 Copyright held by the owner/author(s). Publication rights licensed to ACM.; CHI Conference on Human Factors in Computing Systems ; Conference date: 13-04-2022 Through 14-04-2022",

year = "2022",

month = apr,

day = "29",

doi = "10.1145/3491102.3502125",

language = "English",

editor = "Simone Barbosa and Cliff Lampe and Caroline Appert and Shamma, \{David A.\} and Steven Drucker and Julie Williamson and Koji Yatani",

booktitle = "CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems",

publisher = "Association for Computing Machinery",

url = "https://chi2022.acm.org/",

}

Hammann, S, Crabb, M, Radomirović, S, Sasse, R & Basin, D 2022, "I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts. in S Barbosa, C Lampe, C Appert, DA Shamma, S Drucker, J Williamson & K Yatani (eds), CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems., 620, Association for Computing Machinery, New York, CHI Conference on Human Factors in Computing Systems, New Orleans, Louisiana, United States, 13/04/22. https://doi.org/10.1145/3491102.3502125

"I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts. / Hammann, Sven ; Crabb, Michael; Radomirović, Saša et al.
CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems. ed. / Simone Barbosa; Cliff Lampe; Caroline Appert; David A. Shamma; Steven Drucker; Julie Williamson; Koji Yatani. New York: Association for Computing Machinery, 2022. 620.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - "I’m Surprised So Much Is Connected"

T2 - CHI Conference on Human Factors in Computing Systems

AU - Hammann, Sven

AU - Crabb, Michael

AU - Radomirović, Saša

AU - Sasse, Ralf

AU - Basin, David

PY - 2022/4/29

Y1 - 2022/4/29

N2 - A person's online security setup is tied to the security of their individual accounts. Some accounts are particularly critical as they provide access to other online services. For example, an email account can be used for external account recovery or to assist with single-sign-on. The connections between accounts are specific to each user's setup and create unique security problems that are difficult to remedy by following generic security advice. In this paper, we develop a method to gather and analyze users' online accounts systematically. We demonstrate this in a user study with 20 participants and obtain detailed insights on how users' personal setup choices and behaviors affect their overall account security. We discuss concrete usability and privacy concerns that prevented our participants from improving their account security. Based on our findings, we provide recommendations for service providers and security experts to increase the adoption of security best practices.

AB - A person's online security setup is tied to the security of their individual accounts. Some accounts are particularly critical as they provide access to other online services. For example, an email account can be used for external account recovery or to assist with single-sign-on. The connections between accounts are specific to each user's setup and create unique security problems that are difficult to remedy by following generic security advice. In this paper, we develop a method to gather and analyze users' online accounts systematically. We demonstrate this in a user study with 20 participants and obtain detailed insights on how users' personal setup choices and behaviors affect their overall account security. We discuss concrete usability and privacy concerns that prevented our participants from improving their account security. Based on our findings, we provide recommendations for service providers and security experts to increase the adoption of security best practices.

KW - Security and privacy

KW - aspects of security and privacy

KW - Human-centered computing

KW - User studies

KW - Account Graph

KW - security setup

KW - user interviews

UR - https://www.scopus.com/pages/publications/85130556445

U2 - 10.1145/3491102.3502125

DO - 10.1145/3491102.3502125

M3 - Conference contribution

BT - CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems

A2 - Barbosa, Simone

A2 - Lampe, Cliff

A2 - Appert, Caroline

A2 - Shamma, David A.

A2 - Drucker, Steven

A2 - Williamson, Julie

A2 - Yatani, Koji

PB - Association for Computing Machinery

CY - New York

Y2 - 13 April 2022 through 14 April 2022

ER -

Hammann S, Crabb M, Radomirović S, Sasse R, Basin D. "I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts. In Barbosa S, Lampe C, Appert C, Shamma DA, Drucker S, Williamson J, Yatani K, editors, CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems. New York: Association for Computing Machinery. 2022. 620 doi: 10.1145/3491102.3502125

"I’m Surprised So Much Is Connected": A Study on Users’ Online Accounts

Abstract

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this