Designing a Choice Architecture for Mobile Device Privacy and Security

Опубликовано 28 июля 2016, 1:01

Smartphones offer advanced hardware and software features that allow developers to design feature-rich applications. But with great power comes great responsibility: untrustworthy smartphone applications have the ability to access personal information, damage hardware, or even incur charges on a user's phone bill. To mitigate these risks, several smartphone platforms feature permission-granting interfaces in order to facilitate a notice and consent process: the user can see what abilities an application is requesting and then must explicitly approve the requests. In this talk, I describe several experiments I have performed to examine whether or not smartphone users currently understand these permissions interfaces, whether or not they consider them as part of a larger decision to install a particular application, and how the architecture of this notice and consent process can be improved.