Security & Privacy Nudges
Nudges after Thaler and Sunstein are subtle changes of a decision interface that encourage the user to make the «wise» choice without restricting the original choice set. They do so by making use of automatic cognitive processes, such as biases or heuristics. They can be considered a soft paternalistic approach.
In the context of security and privacy, nudges aim to support users in making secure choices or informed privacy decisions. An example is provided by changing the position of public WiFis in the selection list on the smartphone so that the secure choice is shown on top of the list as users often pick the first option.
However, to prevent a potential manipulation of the user through invisible nudges that users may be unaware of, ethical aspects such as transparency need to be considered in the nudge design. One aim of the Security, Privacy and Society group is to design effective yet ethical nudges that enable the human to actively contribute to security and privacy.
Exemplary publications
Zimmermann, Verena; Marky, Karola; Renaud, Karen (2022): Hybrid password meters for more secure passwords – a comprehensive study of password meters including nudges and password information. In: Behaviour & Information Technology, Taylor & Francis, DOI: 10.1080/0144929X.2022.2042384
Zimmermann, Verena; Renaud, Karen (2021): The Nudge Puzzle: Matching Nudge Interventions to Cybersecurity Decisions. In: ACM Transactions on Computer-Human Interaction, 28 (1), S. 7:1-7:45, ACM, DOI: 10.1145/3429888
Renaud, Karen; Zimmermann, Verena (2018): Ethical guidelines for nudging in information security & privacy. In: International Journal of Human-Computer Studies (IJHCS), 120, S. 22-35, Elsevier, DOI: 10.1016/j.ijhcs.2018.05.011