Usable Security and Privacy

End User Assessment

Bita Afshar
Metric Review
S6biafsh@uni-Bonn.de

1
Contents

1. Research Goal

2. Selection process

3. Famous usable security and privacy questionnaires

4. How questionnaires relate to each other?

2
Research Goal

Find a correlation between famous end user usable security and privacy
questionnaires.

3
Selection Process
Citation

IUIPC = 3596 SeBIS = 290

Privacy Attitude and Behavior = 705 HAIS-Q = 255

ISS = 393 SA-6,SA13 = 44, 3

4
Selection Process
 Other Metrices are based on them Or Validate their new Metrics
such as:
Factors in an End-User Expertise Instrument (IUIPC)

 Different papers validate my selection

5
 Internet Users’
Information Privacy
Concerns (IUIPC)

6
Privacy Attitudes and
Behavior

7
Internet Skills Scale
(ISS)

8
 Security Behavior
Intentions Scale (SeBIS)

9
 Human Aspects of
Information Security
Questionnaire (HAIS-Q)

10
 Measure of End-User
Security Attitudes (SA-13)

11
What they have
in common?

12
More Details…
IUIPC & Privacy attitude and behavior
Q1 in Privacy section is related to IUIPC subject
Q3 in general caution (Register in website that has privacy policy…)

Privacy Attitude & Behavior

General caution Q3 (check the privacy certificate of website) = Proactive awareness in SeBIS
General caution, Privacy concern= Internet Use Q2 ( assessing dubious website) in HAIS-Q

SeBIS
Device securement = Mobile devices in HAIS-Q
Password generation = HAISQ password management (Password reuse, strong password)
Proactive Awareness = Email use (Q1,Q2) in HAIS-Q, = Internet Use Q2 ( assessing dubious website)

ISS
Social = Social media in HAIS-Q (From security point of view)

SA-13,SA-6
More investigating about general security behavior
13
Thank you for your
attention

Any Opinnions?
14