What triggers end-user security and privacy (S&P) behaviors? How do those triggers vary across individuals? When and how do people share their S&P behavior changes? Prior work, in usable security and persuasive design, suggests that answering these questions is critical if we are to design systems that encourage pro-S&P behaviors. Accordingly, we asked 852 online survey respondents about their most recent S&P behaviors (n = 1947), what led up to those behaviors, and if they shared those behaviors. We found that social “triggers”, where people interacted with or observed others, were most common, followed by proactive triggers, where people acted absent of an external stimulus, and lastly by forced triggers, where people were forced to act. People from different age groups, nationalities, and levels of security behavioral intention (SBI) all varied in which triggers were dominant. Most importantly, people with low-to-medium SBI most commonly reported social triggers. Furthermore, participants were four times more likely to share their behavior changes with others when they, themselves, reported a social trigger.
more »
« less
An Examination of Industry Standards of Success within Penetration Testing Groups
While security technology can be nearly impenetrable, the people behind the computer screens are often easily manipulated, which makes the human factor the biggest threat to cybersecurity. This study examined whether college students disclosed private information about themselves, and what type of information they shared. The study utilized pretexting, in which attackers impersonate individuals in certain roles and often involves extensive research to ensure credibility. The goal of pretexting is to create situations where individuals feel safe releasing information that they otherwise might not. The pretexts used for this study were based on the natural inclination to help, where people tend to want to help those in need, and reciprocity, where people tend to return favors given to them. Participants (N=51) answered survey questions that they thought were for a good cause or that would result in a reward. This survey asked for increasingly sensitive information that could be used maliciously to gain access to identification, passwords, or security questions. Upon completing the survey, participants were debriefed on the true nature of the study and were interviewed about why they were willing to share information via the survey. Some of the most commonly skipped questions included “Student ID number” and “What is your mother’s maiden name?”. General themes identified from the interviews included the importance of similarities between the researcher and the subject, the researcher’s adherence to the character role, the subject’s awareness of question sensitivity, and the overall differences between online and offline disclosure. Findings suggest that college students are more likely to disclose private information if the attacker shares a similar trait with the target or if the attacker adheres to the character role they are impersonating. Additionally, this study sheds light on the research limitations, emphasizes the relevance of the human factor in security and privacy, and offers recommendations for future research.
more »
« less
- Award ID(s):
- 1742747
- PAR ID:
- 10309907
- Date Published:
- Journal Name:
- IEEE Integrated STEM Education Conference
- Format(s):
- Medium: X
- Sponsoring Org:
- National Science Foundation
More Like this
-
-
First-generation college students have entered the spotlight of educational research and reform. This shift in perspective has been covered in popular media, for example, in The Chronicle of Higher Education’s series entitled “Engine of Inequality,” which analyzes the challenges facing first-generation college students. However, engineering programs have been slower in responding to this new emphasis on first-generation college students, perhaps assuming that the lack of success of underrepresented groups is a result of deficiencies in the students’ background and preparation. Our research challenges this assumption by explicitly investigating the connections between first-generation engineering students’ success and their experiences within higher education, using a large-scale quantitative survey. Whereas the deficiency perspective focuses on what these students lack and how they need to change themselves in order to adapt to engineering undergraduate curricula, this study seeks to understand how first-generation college student’s funds of knowledge (i.e., family and cultural knowledge developed by growing up in poor and/or working households) can be leveraged in their engineering work and the factors that contribute to their success in engineering. Using ethnographic data of first-generation college students in engineering, from prior work, seven themes were created to capture aspects of students’ funds of knowledge. The themes were classified as follows: community networks, lived experiences, tinkering knowledge from home, tinkering knowledge from work, perspective taking, reading people, and translation among people. To date, the funds of knowledge themes have been validated, at the first level, using exploratory factor analysis with a broad range of engineering students from first-years to fourth-year of higher at two institutions, one in the Midwest and one in the mountain region. Convenience sampling was used to test and validate the funds of knowledge survey constructs. We are currently in our second data collection process. The large-scale survey will be administered to upperclassman and alumni at five participating institutions across the United States, i.e., in a large public polytechnic, small selective private polytechnic, large land grant, large sub-urban public, and large public universities.more » « less
-
The ongoing lack of diversity in STEM fields has been described as both: a) a critical issue with a detrimental impact on the United States’ ability to compete with global innovation (Chen, 2013) and b) a systemic issue that excludes certain groups of people from opportunities for economic mobility and job security (Wait & McDonald, 2019). Historically excluded groups, such as women, Black/African Americans, Latin Americans, and economically disadvantaged individuals, continue to be in the minority in STEM (Carnevale et al., 2021). Through the years of research on historically excluded groups, researchers have asserted the importance of developing an engineering identity in determining later success in engineering (Allen & Eisenhart, 2017; Kang et al., 2019; Stipanovic & Woo, 2017). With only 8% of all engineering students entering higher education from low income backgrounds (NCES, 2016; Major et. al, 2018), these students often face significant barriers to their success (Chen, 2013; Hoxby & Avery, 2012), yet there has been very little attention given to them in the research historically. Our study seeks to address the gap related to this population and support the developing understanding of how high achieving, low income students form an engineering identity, as well as the intersectionality and salience of their other socio-cultural identities. Using the theoretical framework of figured worlds (Holland et al., 1998; Waide-James & Schwartz, 2019), we sought to explore what factors shaped the formation of an engineering identity for high achieving, low income college students participating in an engineering scholarship program. Specifically, our research questions were: 1) What factors shape the formation of engineering identity for high achieving, low income students participating in an engineering scholarship program? and 2) How salient are other social identities in the formation of their engineering identity? A constructivist grounded theory (Charmaz, 2014) design guided our selection of individual interviews and focus groups as data collection tools, allowing us to tailor our interview questions and shape our programming around the needs of participants. NSF SSTEM-sponsored program activities that could shape the figured world of participants included intentional mentoring, cohort-based seminars, targeted coursework in design courses, and connecting students to internships and co-ops. Emerging themes for our preliminary data analysis reveal the importance of peer relationships, professional mentorship, and cultural wealth, including social capital. Preliminary results from this study have the potential to increase understanding of how to best support the success of high achieving, low income college students in engineering programs, including the implementation of targeted interventions and supports, as well as shed further light on the skills they use to overcome systemic barriers.more » « less
-
This paper reports on research that is part of a broader National Science Foundation (NSF)-funded, Innovations in Graduate Education (IGE) project. The project aims to enhance the research culture and broaden the participation in research of underrepresented groups within graduate engineering programs at a mid-sized historically black college or university. The project includes three initiatives that seek to assist in the development of a “research engineer identity” among the graduate students pursuing research-based degrees in the college. One of the three initiatives of the project, and focus of this paper, involves the development of a survey-based Research Engineer Identity Scale (REIS). A two stage sequential mixed-method research design is being used to develop the scale. This paper focuses on the first stage in the design which involved conducting focus groups with research engineers to gain insight into the content, character, and complications associated with internalizing a Research Engineer Identity (REI) in general and among people from underrepresented groups in particular. We report on four semi-structured focus groups that each lasted approximately 90 minutes in Fall 2019. Each focus group included about 6 to 9 faculty members, industry professionals, or graduate students who actively engaged in engineering research in the Southeastern United States. Focus group participants represented various academic disciplines within engineering as well as a range of demographic characteristics such as sex, race, ethnicity, and citizenship status. The focus group conversations were transcribed and transcriptions were entered into NVivo for coding and analysis. Inter-rater reliability procedures were used to ensure consistency of coding. This paper reports on the themes that emerged within the focus group discussions regarding what it means to “be a research engineer.” The findings describe similarities and differences across demographic characteristics in regard to the content, character, and complications associated with efforts to develop a Research Engineer Identity. The paper concludes by briefly describing the process that will be used to transform the emergent themes into pool of items to be included in a web-based questionnaire designed to measure Research Engineer Identity.more » « less
-
The number of female students in computing fields remain low despite the millions of dollars spent on research for attracting more female students. In order to attract more female students to these male dominated fields, we first have to understand in which educational years we are losing female students. For the purpose of this study, we utilized the data from [title blinded for anonymity] an NSF funded study. Approximately, 1650 students from three large public universities in Florida participated in this survey. The survey contained 39 questions around identity, field of study, as well as fields they wanted to pursue during middle school, high school, and college. The responses gathered through the Qualtrics survey system were analyzed in R by the research team. The research questions that guided this study were: (1) To what extent are female students interested in computing related fields at middle school, the beginning of high school, and the beginning of college? (2) How have these occupational pursuits changed over time? Do they differ for gender? The results of the study indicated a majority of female students that were attracted to the computing fields during middle school remained in those fields during high school and college years. However, there was no significant flow from other majors to the computing fields observed during the different educational years.more » « less
An official website of the United States government

