Digital security technology is able to identify and prevent many threats to users accounts. However, some threats remain that, to provide reliable security, require human intervention: e.g., through users paying attention to warning messages or completing secondary authentication procedures. While prior work has broadly explored people's mental models of digital security threats, we know little about users' precise, in-the-moment response process to in-the-wild threats. In this work, we conduct a series of qualitative interviews (n=67) with users who had recently experienced suspicious login incidents on their real Facebook accounts in order to explore this process of account security incident response. We find a common process across participants from five countries -- with differing online and offline cultures -- allowing us to identify areas for future technical development to best support user security. We provide additional insights on the unique nature of incident-response information seeking, known attacker threat models, and lessons learned from a large, cross-cultural qualitative study of digital security.
Our work takes another step toward answering that call: here, we report the first interview study on digital security conducted across more than two countries. Considering multiple countries allowed for an important addition to cross-cultural security analysis: the consideration of culture as a set of dimensions (e.g., Internet penetration, Internet censorship, platform use types). These dimensions allowed us to identify potential effects of culture on user security more precisely than if we had considered only nationality as a singular representation of culture. For example, we were able to hypothesize about why we observe variations by nationality -- a gap in prior cross-cultural security work @cite_75 @cite_38 -- and supports more concrete avenues for future work: e.g., developing tools that specifically protect users in censored countries from Digital Graffiti Artists'', by detecting a negative-sentiment post about a government leader and requesting SMS-confirmation before posting.
@cite_38 @cite_75
1990562690 2282408813 1748798774 2610939075
Purpose – The aim of this research is to make users aware of the importance surrounding the issue of security and security awareness while at the same time making educators as well as other individuals aware of the differing effects of cultural dimensions into the learning process.Design methodology approach – An inter‐cultural study was conducted to investigate if users from the USA and Taiwan exposed to the same situational awareness learning would have different performance in those security awareness outcomes.Findings – The findings confirm that American users who received the situational learning outperformed those users who received the traditional face‐to‐face instruction. Taiwanese users did not perform significantly differently between these two treatments.Research limitations implications – The study was only focused on two countries and therefore may limit its implications worldwide. But the study does show that global citizens also react differently to security awareness as would be expected d... Previous studies have established the link between one's actions (e.g., engaging with others vs. minding one's own business) and one's national culture (e.g., collectivist vs. individualistic), and such actions have been shown to be important as they are collectively affiliated with a country's economic outcomes (e.g., Gross Domestic Product). Hitherto there has not been any systematic study of whether one's action on Twitter (e.g., deciding when to post messages) is linked to one's culture (e.g., country's Pace of Life). To fix that, we build different network snapshots starting from 55,000 seed users on Twitter, and we do so for 10 weeks across 30 countries (after filtering those with low penetration rates) for a total of 2.34 M profiles. Based on Hofstede's theory of cultural dimensions and Levine's Pace of Life theory, we consider three behavioral patterns on Twitter (i.e., temporal predictability of tweets, engaging with others, and supporting others who are less popular) and associate them with three different dimensions derived from the two theories: Pace of Life, Individualism and Power Distance. We find the following strong correlations: activity predictability negatively correlates with Pace of Life (r=-0.62), tweets with mentions negatively correlates with Individualism (r = -0.55), and power (e.g, Twitter popularity) imbalance in relationships (between, for example, two users mentioning each other) is correlated with Power Distance (r=0.62). These three cultural dimensions matter because they are associated with a country's socio-economic aspects - with GDP per capita, income inequality, and education expenditure. Relying on Gudykunst's cultural variability in communication (CVC) framework and culture-specific facial expressions of emotion, we examined how people's use of emoticons varies cross-culturally. By merging emoticon usage patterns on Twitter with Hofstede's national culture scores and national indicators across 78 countries, this study found that people within individualistic cultures favor horizontal and mouth-oriented emoticons like :), while those within collectivistic cultures favor vertical and eye-oriented emoticons like ^_^. Our study serves to demonstrate how recent big data-driven approaches can be used to test research hypotheses in cross-cultural communication effectively from the methodological triangulation perspective. Implications and limitations regarding the findings of this study are also discussed. Computer security tools usually provide universal solutions without taking user characteristics (origin, income level, ...) into account. In this paper, we test the validity of using such universal security defenses, with a particular focus on culture. We apply the previously proposed Security Behavior Intentions Scale (SeBIS) to 3,500 participants from seven countries. We first translate the scale into seven languages while preserving its reliability and structure validity. We then build a regression model to study which factors affect participants' security behavior. We find that participants from different countries exhibit different behavior. For instance, participants from Asian countries, and especially Japan, tend to exhibit less secure behavior. Surprisingly to us, we also find that actual knowledge influences user behavior much less than user self-confidence in their computer security knowledge. Stated differently, what people think they know affects their security behavior more than what they do know.