All

Papers

Browse and search HCI research papers from All

Active Filters

Institution: Max Planck Institute for Security and Privacy

12 results

Characterizing Scam-Driven Human Trafficking Across Chinese Borders and Online Community Responses on RedNote

A new form of human trafficking has emerged across Chinese borders, where individuals are lured to Southeast Asia with fraudulent job offers and then coerced into operating online scams. Despite its massive economic and human toll, this scam-driven trafficking remains underexplored in academic research. Through qualit…

Jiamin Zheng et al.University of Edinburgh

Do Citizens Agree with the EU AI Act? Public Perspectives on Risk and Regulation of AI Systems

The European Union (EU) has spearheaded the regulation of artificial intelligence (AI) with the AI Act, which regulates AI systems based on the risks they pose to fundamental rights and other protected values. AI systems that pose unacceptable risks are prohibited, high-risk AI systems must comply with mandatory requi…

Gabriel Lima et al.

Max Planck Institute for Security and Privacy

It Shouldn't Be This Difficult: Researcher Perspectives on Diversity and Inclusion in Usable Privacy and Security Research

While recent usable privacy and security (UPS) research has made progress in moving beyond “the average user,” a systematic account of how UPS researchers navigate diversity and inclusion in their work remains lacking. Through 20 in-depth semi-structured interviews with experienced researchers, we examine how and why…

Priyasha Chatterjee et al.Max Planck Institute for Security and Privacy

From Harm to Healing: Understanding Individual Resilience after Cybercrimes

How do individuals recover from cybercrimes? Victims experience various types of harm after cybercrimes, including monetary loss, data breaches, negative emotions, and even psychological trauma. The aspects that support their recovery process and contribute to individual cyber resilience remain underinvestigated. To a…

Xiaowei Chen et al.Max Planck Institute for Security and Privacy

AdRecommended

Learn AI Coding at CodeNow

Structured lessons, hands-on projects, and continuous updates for people bringing AI into real development work.

Explore Now

Experiencer, Helper, or Observer: Online Fraud Intervention for Older Adults Through a Role-based Simulation Approach

Online fraud is a critical global threat that disproportionately targets older adults. Prior anti-fraud education for older adults has largely relied on static, traditional instruction that limits engagement and real-world transfer, whereas role-based simulation offers realistic yet low-risk opportunities for practice…

Yue DENG et al.Hong Kong University of Science and Technology

Trauma-Informed Computing: Towards Safer Technology Experiences for All

Trauma is the physical, emotional, or psychological harm caused by deeply distressing experiences. Research with communities that may experience high rates of trauma has shown that digital technologies can create or exacerbate traumatic experiences. Via three vignettes, we discuss how considering the possible effects…

Janet X. Chen et al.Cornell University

Child Safety in the Smart Home: Parents' Perceptions, Needs, and Mitigation Strategies

Concerns about child physical and digital safety are emerging with families' adoption of smart home technologies such as robot vacuums and smart speakers. To better understand parents' definitions and perceptions of child safety regarding smart home technologies, we interviewed 23 parents who are smart home adopters.…

Kaiwen Sun et al.University of Michigan

Parenting and Family

Toggles, Dollar Signs, and Triangles: How to (In)Effectively Convey Privacy Choices

Increasingly, icons are being proposed to concisely convey privacy-related information and choices to users. However, complex privacy concepts can be difficult to communicate. We investigate which icons effectively signal the presence of privacy choices. In a series of user studies, we designed and evaluated icons and…

Hana Habib et al.Carnegie Mellon University

"It's a scavenger hunt": Usability of Websites' Opt-Out and Data Deletion Choices

We conducted an in-lab user study with 24 participants to explore the usefulness and usability of privacy choices offered by websites. Participants were asked to find and use choices related to email marketing, targeted advertising, or data deletion on a set of nine websites that differed in terms of where and how the…

Hana Habib et al.Carnegie Mellon University

Examining the Adoption and Abandonment of Security, Privacy, and Identity Theft Protection Practices

Users struggle to adhere to expert-recommended security and privacy practices. While prior work has studied initial adoption of such practices, little is known about the subsequent implementation and abandonment. We conducted an online survey (n=902) examining the adoption and abandonment of 30 commonly recommended pr…

Yixin Zou et al.Max Planck Institute for Security and Privacy

Put Your Warning Where Your Link Is: Improving and Evaluating Email Phishing Warnings

Phishing emails often disguise a link's actual URL. Thus, common anti-phishing advice is to check a link's URL before clicking, but email clients do not support this well. Automated phishing detection enables email clients to warn users that an email is suspicious, but current warnings are often not specific. We evalu…

Justin Petelka et al.University Of Washington

You 'Might' Be Affected: An Empirical Analysis of Readability and Usability Issues in Data Breach Notifications

Data breaches place affected individuals at significant risk of identity theft. Yet, prior studies have shown that many consumers do not take protective actions after receiving a data breach notification from a company. We analyzed 161 data breach notifications sent to consumers with respect to their readability, stru…

Yixin Zou et al.Max Planck Institute for Security and Privacy

Paper Title	Authors	Research Topics
emoji_events Characterizing Scam-Driven Human Trafficking Across Chinese Borders and Online Community Responses on RedNote A new form of human trafficking has emerged across Chinese borders, where individuals are lured to Southeast Asia with fraudulent job offers and then coerced into operating online scams. Despite its massive economic and human toll, this scam-driven trafficking remains underexplored in academic research. Through qualit…	JZ Jiamin Zheng et al.University of Edinburgh
Do Citizens Agree with the EU AI Act? Public Perspectives on Risk and Regulation of AI Systems The European Union (EU) has spearheaded the regulation of artificial intelligence (AI) with the AI Act, which regulates AI systems based on the risks they pose to fundamental rights and other protected values. AI systems that pose unacceptable risks are prohibited, high-risk AI systems must comply with mandatory requi…	GL Gabriel Lima et al.Max Planck Institute for Security and Privacy
It Shouldn't Be This Difficult: Researcher Perspectives on Diversity and Inclusion in Usable Privacy and Security Research While recent usable privacy and security (UPS) research has made progress in moving beyond “the average user,” a systematic account of how UPS researchers navigate diversity and inclusion in their work remains lacking. Through 20 in-depth semi-structured interviews with experienced researchers, we examine how and why…	PC Priyasha Chatterjee et al.Max Planck Institute for Security and Privacy
From Harm to Healing: Understanding Individual Resilience after Cybercrimes How do individuals recover from cybercrimes? Victims experience various types of harm after cybercrimes, including monetary loss, data breaches, negative emotions, and even psychological trauma. The aspects that support their recovery process and contribute to individual cyber resilience remain underinvestigated. To a…	XC Xiaowei Chen et al.Max Planck Institute for Security and Privacy
AdRecommended Learn AI Coding at CodeNow Structured lessons, hands-on projects, and continuous updates for people bringing AI into real development work. Explore Now
emoji_events Experiencer, Helper, or Observer: Online Fraud Intervention for Older Adults Through a Role-based Simulation Approach Online fraud is a critical global threat that disproportionately targets older adults. Prior anti-fraud education for older adults has largely relied on static, traditional instruction that limits engagement and real-world transfer, whereas role-based simulation offers realistic yet low-risk opportunities for practice…	YD Yue DENG et al.Hong Kong University of Science and Technology
Trauma-Informed Computing: Towards Safer Technology Experiences for All Trauma is the physical, emotional, or psychological harm caused by deeply distressing experiences. Research with communities that may experience high rates of trauma has shown that digital technologies can create or exacerbate traumatic experiences. Via three vignettes, we discuss how considering the possible effects…	JC Janet X. Chen et al.Cornell University
Child Safety in the Smart Home: Parents' Perceptions, Needs, and Mitigation Strategies Concerns about child physical and digital safety are emerging with families' adoption of smart home technologies such as robot vacuums and smart speakers. To better understand parents' definitions and perceptions of child safety regarding smart home technologies, we interviewed 23 parents who are smart home adopters.…	KS Kaiwen Sun et al.University of Michigan	Parenting and Family
Toggles, Dollar Signs, and Triangles: How to (In)Effectively Convey Privacy Choices Increasingly, icons are being proposed to concisely convey privacy-related information and choices to users. However, complex privacy concepts can be difficult to communicate. We investigate which icons effectively signal the presence of privacy choices. In a series of user studies, we designed and evaluated icons and…	HH Hana Habib et al.Carnegie Mellon University
"It's a scavenger hunt": Usability of Websites' Opt-Out and Data Deletion Choices We conducted an in-lab user study with 24 participants to explore the usefulness and usability of privacy choices offered by websites. Participants were asked to find and use choices related to email marketing, targeted advertising, or data deletion on a set of nine websites that differed in terms of where and how the…	HH Hana Habib et al.Carnegie Mellon University
emoji_events Examining the Adoption and Abandonment of Security, Privacy, and Identity Theft Protection Practices Users struggle to adhere to expert-recommended security and privacy practices. While prior work has studied initial adoption of such practices, little is known about the subsequent implementation and abandonment. We conducted an online survey (n=902) examining the adoption and abandonment of 30 commonly recommended pr…	YZ Yixin Zou et al.Max Planck Institute for Security and Privacy
emoji_events Put Your Warning Where Your Link Is: Improving and Evaluating Email Phishing Warnings Phishing emails often disguise a link's actual URL. Thus, common anti-phishing advice is to check a link's URL before clicking, but email clients do not support this well. Automated phishing detection enables email clients to warn users that an email is suspicious, but current warnings are often not specific. We evalu…	JP Justin Petelka et al.University Of Washington
You 'Might' Be Affected: An Empirical Analysis of Readability and Usability Issues in Data Breach Notifications Data breaches place affected individuals at significant risk of identity theft. Yet, prior studies have shown that many consumers do not take protective actions after receiving a data breach notification from a company. We analyzed 161 data breach notifications sent to consumers with respect to their readability, stru…	YZ Yixin Zou et al.Max Planck Institute for Security and Privacy