社会影响力是否会被利用来损害安全:在线实验评估
Can social influence be exploited to compromise security: An online experimental evaluation
摘要:
社交媒体使用户和组织能够获得有关技术使用的信息,如软件使用甚至安全功能使用。然而,在黑暗的一面,它也允许对手潜在地利用用户,从他们那里获取信息,或者影响他们做出可能具有恶意设置或意图的决定。虽然已经有大量的努力了解社会影响力如何影响一个人的可能性,采用安全技术,特别是其相关性的朋友采用相同的技术的数量,在这项研究中,我们调查是否同行的影响力可以决定用户决定超过自己的知识。为此,我们在一项与人类参与者的在线对照实验中操纵社交信号曝光,以调查社交影响是否可以以负面的方式引导用户做出有害的安全选择。我们通过一个受控游戏来分析这一点,在这个游戏中,每个参与者在面对六种具有不同效用的安全技术时选择一种选项,其中一种选择具有最大的效用。在多轮游戏中,我们观察到社交影响力作为一种工具可以非常强大地操纵用户对采用效率较低的安全技术的决定。然而,在这个过程中更突出的是,用户从其同伴那里接收社交信号的方式决定了社交影响力在多大程度上可以成功改变用户的行为。
英文摘要:
Social media has enabled users and organizations to obtain information about technology usage like software usage and even security feature usage. However, on the dark side it has also allowed an adversary to potentially exploit the users in a manner to either obtain information from them or influence them towards decisions that might have malicious settings or intents. While there have been substantial efforts into understanding how social influence affects one's likelihood to adopt a security technology, especially its correlation with the number of friends adopting the same technology, in this study we investigate whether peer influence can dictate what users decide over and above their own knowledge. To this end, we manipulate social signal exposure in an online controlled experiment with human participants to investigate whether social influence can be harnessed in a negative way to steer users towards harmful security choices. We analyze this through a controlled game where each participant selects one option when presented with six security technologies with differing utilities, with one choice having the most utility. Over multiple rounds of the game, we observe that social influence as a tool can be quite powerful in manipulating a user's decision towards adoption of security technologies that are less efficient. However, what stands out more in the process is that the manner in which a user receives social signals from its peers decides the extent to which social influence can be successful in changing a user's behavior.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。