‘SSL？！那到底是什么？’：面向年龄包容的安全智能手机浏览设计
'SSL?! What on earth is that?': Towards Designing Age-Inclusive Secure Smartphone Browsing
AI总结：
本研究评估了智能手机上现有信任机制在防范钓鱼网站方面的可用性，发现现有机制效果不佳且用户体验差，并探讨了老年人等群体对社交支持等替代信任模态的偏好，为设计年龄包容的安全浏览机制提供了依据。
摘要：
由于‘经过认证’的钓鱼网站数量增加，钓鱼案件和对钓鱼攻击的普遍易感性也在稳步上升。因此，应当评估那些帮助区分真实网站和钓鱼网站的信任机制（例如 HTTPS 锁形指示器、SSL 证书）在防止易受攻击的用户访问钓鱼网站方面的有效性。在本文中，我们开展了一项涉及 18 名成年人（男性 6 名；女性 12 名）和 12 名老年人（男性 4 名；女性 8 名）的研究，以了解当前信任机制的可用性以及在一种概念化机制中偏好的模态。在研究的第一部分，我们使用 Android 上的 Chrome 浏览器，要求参与者浏览一个银行网站和一个用于获取数字信息的政府网站。我们要求他们识别这两个网站中哪一个是钓鱼网站，对两个网站的可用性进行评分，并提供关于信任机制的定性反馈。在研究的第二部分，我们概念化了一种替代的信任机制，该机制允许寻求社交、社区和基于 AI 的支持来做出与网站信任相关的决策。在此，我们询问参与者倾向于从哪种模态（社交、社区或 AI）寻求支持以及为什么偏好该模态。使用当前的信任机制，没有参与者能够识别出钓鱼网站。由于参与者对当前机制的可用性评价很低，他们表达了各种困难，这些困难在成年人和老年人之间基本没有差异。在概念化机制中，我们观察到在偏好模态上存在显著差异，即老年人主要偏好社交支持。除了这些总体发现外，具体的观察表明，未来的信任机制不仅应考虑特定年龄的需求，还应在可用性方面纳入实质性的改进。
英文摘要：
Owing to the increase in 'certified' phishing websites, there is a steady increase in the number of phishing cases and general susceptibility to phishing. Trust mechanisms (e.g., HTTPS Lock Indicators, SSL Certificates) that help differentiate genuine and phishing websites should therefore be evaluated for their effectiveness in preventing vulnerable users from accessing phishing websites. In this article, we present a study involving 18 adults (male-6; female-12) and 12 older adults (male-4; female-8) to understand the usability of current trust mechanisms and preferred modalities in a conceptualized mechanism. In the first part of the study, using Chrome browser on Android, we asked the participants to browse a banking website and a government website for digital particulars. We asked them to identify which one of the two was a phishing website, rate the usability of both websites and provide qualitative feedback on the trust mechanisms. In the second part, we conceptualized an alternative trust mechanism, which allows seeking social, community and AI-based support to make website trust-related decisions. Herein, we asked the participants as to which modality (social, community or AI) they prefer to seek support from and why it is preferred. Using the current trust mechanisms, none of the participants were able to identify the phishing website. As the participants rated the current mechanisms poorly in terms of usability, they expressed various difficulties that largely did not differ between adults and older adults. In the conceptualized mechanism, we observed a notable difference in the preferred modalities, in that, older adults primarily preferred social support. In addition to these overall findings, specific observations suggest that future trust mechanisms should not only consider age-specific needs but also incorporate substantial improvement in terms of usability.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
