Logo des Repositoriums

Auflistung nach Autor:in "Pfeiffer, Thomas"

1 - 2 von 2
  • Konferenzbeitrag
    “A bank would never write that!' A qualitative study on E-mail trust decisions
    (Informatik 2014, 2014) Pfeiffer, Thomas; Kauer, Michaela; Röth, Julia
    In order to communicate the risk of fraudulent e-mails to users properly, it is important to know which aspects they focus on when evaluating the trustworthiness of an e-mail. To that end, a study was conducted to test predictions derived from a decision model by asking participants how they would react to each of eight e-mails and why. The study confirms results from previous research showing that content as well as visual and linguistic aspects, but also technical aspects such as sender address and link URL are considered by recipients. It also adds new findings like the fact that through experience and education, users form rules such as “A bank will never ask you for account details via e-mail” or the fact that attachments in HTML format or implausible sending times raise suspicions in users. These findings can be used to inform the design of anti-fraud education and user interfaces of e-mail clients.
  • Konferenzbeitrag
    It is not about the design – it is about the content! Making warnings more efficient by communicating risks appropriately
    (SICHERHEIT 2012 – Sicherheit, Schutz und Zuverlässigkeit, 2012) Kauer, Michaela; Pfeiffer, Thomas; Volkamer, Melanie; Theuerling, Heike; Bruder, Ralph
    Most studies in usable security research aim at a quantification of persons, who - depending on the subject – fall for phishing, pass on their password, download malicious software and so on. In contrast, little research is done to identify the reasons for such insecure behavior. Within this paper, the result of a laboratory study is presented in which participants were confronted with different certificate warnings. Those warnings were presented when the participants tried to access different websites with different criticality (online banking, online shopping, social networks and information sites). Besides quantitative analyses of participants who were willing to use a websites despite the warning, the main focus of this work is to identify reasons for their decision. As a result of our study those risks are identified which were unacceptable for most participants to take and thereby might help to prevent unsecure usage behavior in the web by rewording warnings according to the perceived risks.