Crying Wolf: An Empirical Study of SSL Warning Effectiveness
By Joshua Sunshine, Serge Egelman, Hazim Almuhimedi, Neha Atri, Lorrie Faith Cranor. USENIX Security Symposium, 2009
501 citations recorded by the source corpus.
View Paper: https://www.semanticscholar.org/paper/50f098f02e843f6d96da23d9c7819105527889f9
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
Citations in the corpus
- The Plight of the Targeted Attacker in a World of Scale (2010, background): “For example, a growing body of measurement studies make clear that users choose weak passwords and re-use them liberally [21], choose easily guessed backup authentication questions [43], are oblivious to security cues [41], ignore certificate error warnings [26] and cannot tell legitimate web-sites ”
- A Survey of Man In The Middle Attacks (2016, background): “In this scenario the attacker may succeed if the victim will ignore the security warnings, which is a common phenomenon [140].”
- "...No one Can Hack My Mind": Comparing Expert and Non-Expert Security Practices (2015, unknown): “[48], Sotirakopoulos et al.”
- Hidden Voice Commands (2016, unknown): “Unfortunately, users notoriously ignore security warning messages, as is demonstrated by numerous studies of the (in)effectiveness of warning messages in deployed systems [35, 37, 44].”
- Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness (2013, background): “The security community’s perception of the “oblivious” user evolved from the results of a number of laboratory studies on browser security indicators [5, 11, 13, 15, 27, 31, 35].”
- The Effectiveness of Application Permissions (2011, background): “Other researchers have shown that browser warnings for phishing sites and invalid SSL certificates are ignored by most users [4, 16]; it is possible that even infrequent permission installation warnings will be ignored.”