Advancements in information technology often task users with complex and consequential
privacy and security decisions. A growing body of research has investigated individuals' …

With the emergence of digitalization, making the use of Internet almost for everything is not a
new trend. The maximum use of it is in the E-commerce systems. Most of the customers are …

Web users are shown an invalid certificate warning when their browser cannot validate the
identity of the websites they are visiting. While these warnings often appear in benign …

Web-based applications rely on the HTTPS protocol to guarantee privacy and security in
transactions ranging from home banking, e-commerce, and e-procurement to those that deal …

Equifax, one of the three major US credit bureaus, experienced a large-scale data breach in
2017. We investigated consumers' mental models of credit bureaus, how they perceive risks …

In Apple's iOS 6, when an app requires access to a protected resource (eg, location or
photos), the user is prompted with a permission request that she can allow or deny. These …

Transmission of personally identifiable information from smartphone apps has become
ubiquitous as smartphones themselves. Privacy controls currently provided in the form of …

This paper presents a measurement study of information leakage and SSL vulnerabilities in
popular Android apps. We perform static and dynamic analysis on 100 apps, downloaded at …

Context-sensitive guidance (CSG) can help users make better security decisions.
Applications with CSG ask the user to provide relevant context information. Based on such …

The security guarantees provided by SSL/TLS depend on the correct authentication of
servers through certificates signed by a trusted authority. However, as recent incidents have …