Item Type |
Conference or Workshop Item
(Paper)
|
Abstract |
Browser extensions enrich users’ browsing experience, e.g., by blocking unwanted advertisements on websites. To perform these functions, users must grant certain permissions during the installation process. These permissions, however, give very limited information about the fact that they allow the extension to access user’s personal data and browsing behaviour, posing security and privacy risks. To understand users’ awareness of these privileges and the associated threats, we conducted an online survey with 353 participants, focusing on users’ attitude, knowledge, and preference towards extensions’ permission requests. We found that users report interest in seeking information, trust the developers but do little to protect their data. They have limited knowledge about the technical abilities of browser extensions and prefer per-mission statements that evoke a clear mental model. Based on our findings we derive recommendations for the improvement of browser extension permission dialogues through clear language, technical improvements and distinct responsibilities. |
Authors |
Kariryaa, Ankit; Savino, Gian-Luca; Stellmacher, Carolin & Schöning, Johannes |
Language |
English |
Keywords |
HCI
Privacy and Security of Browser Extensions |
Subjects |
computer science |
HSG Classification |
contribution to scientific community |
Date |
9 August 2021 |
Publisher |
USENIX |
Title of Book |
Proceedings of the Seventeenth Symposium on Usable Privacy and Security |
Event Title |
SOUPS Seventeenth Symposium on Usable Privacy and Security |
Event Dates |
August 9-10, 2021 |
Depositing User |
Prof. Dr. Johannes Schöning
|
Date Deposited |
18 Oct 2021 08:23 |
Last Modified |
20 Jul 2022 17:46 |
URI: |
https://www.alexandria.unisg.ch/publications/264602 |