{"id":"https://openalex.org/W3092017098","doi":"https://doi.org/10.1145/3320269.3384761","title":"What risk? I don't understand. An Empirical Study on Users' Understanding of the Terms Used in Security Texts","display_name":"What risk? I don't understand. An Empirical Study on Users' Understanding of the Terms Used in Security Texts","publication_year":2020,"publication_date":"2020-10-05","ids":{"openalex":"https://openalex.org/W3092017098","doi":"https://doi.org/10.1145/3320269.3384761","mag":"3092017098"},"language":"en","primary_location":{"id":"doi:10.1145/3320269.3384761","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3320269.3384761","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020443147","display_name":"Tingmin Wu","orcid":"https://orcid.org/0000-0003-0626-3576"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Tingmin Wu","raw_affiliation_strings":["Swinburne University of Technology &amp; CSIRO's Data61, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology &amp; CSIRO's Data61, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077","https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034543604","display_name":"Rongjunchen Zhang","orcid":"https://orcid.org/0000-0003-1823-2726"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Rongjunchen Zhang","raw_affiliation_strings":["Swinburne University of Technology &amp; CSIRO's Data61, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology &amp; CSIRO's Data61, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077","https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011383481","display_name":"Wanlun Ma","orcid":"https://orcid.org/0000-0002-6305-1740"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wanlun Ma","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, China"],"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006669765","display_name":"Xin Xia","orcid":"https://orcid.org/0000-0002-6302-3256"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Xia","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077002072","display_name":"C\u00e9cile Paris","orcid":"https://orcid.org/0000-0003-3816-0176"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Cecile Paris","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5020443147"],"corresponding_institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916","https://openalex.org/I57093077"],"apc_list":null,"apc_paid":null,"fwci":1.3345,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.86351108,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"248","last_page":"262"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.720874547958374},{"id":"https://openalex.org/keywords/notice","display_name":"Notice","score":0.6397556066513062},{"id":"https://openalex.org/keywords/security-awareness","display_name":"Security awareness","score":0.5611551403999329},{"id":"https://openalex.org/keywords/newspaper","display_name":"Newspaper","score":0.5492796301841736},{"id":"https://openalex.org/keywords/human-computer-interaction-in-information-security","display_name":"Human-computer interaction in information security","score":0.4466693699359894},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4444371461868286},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4038343131542206},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3700413107872009},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.34563785791397095},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.29821887612342834},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.22722744941711426}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.720874547958374},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.6397556066513062},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.5611551403999329},{"id":"https://openalex.org/C201280247","wikidata":"https://www.wikidata.org/wiki/Q11032","display_name":"Newspaper","level":2,"score":0.5492796301841736},{"id":"https://openalex.org/C6353995","wikidata":"https://www.wikidata.org/wiki/Q17027910","display_name":"Human-computer interaction in information security","level":5,"score":0.4466693699359894},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4444371461868286},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4038343131542206},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3700413107872009},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.34563785791397095},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.29821887612342834},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.22722744941711426},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3320269.3384761","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3320269.3384761","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:researchbank.swinburne.edu.au:a57d9951-3120-4110-9102-5e9aa10eacc8/1","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.3/458475","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ASIA CCS '20: The 15th ACM Asia Conference on Computer and Communications Security, Taipei Taiwan, pp. 248-262","raw_type":""}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W168564468","https://openalex.org/W1267153886","https://openalex.org/W1447429957","https://openalex.org/W1463518955","https://openalex.org/W1529733883","https://openalex.org/W1880262756","https://openalex.org/W1971295515","https://openalex.org/W1984018499","https://openalex.org/W1997348553","https://openalex.org/W2018398218","https://openalex.org/W2028974852","https://openalex.org/W2038043464","https://openalex.org/W2042251811","https://openalex.org/W2066651136","https://openalex.org/W2068894463","https://openalex.org/W2096112399","https://openalex.org/W2123442489","https://openalex.org/W2126360800","https://openalex.org/W2132903355","https://openalex.org/W2137960395","https://openalex.org/W2139179587","https://openalex.org/W2141667975","https://openalex.org/W2144981153","https://openalex.org/W2211757780","https://openalex.org/W2213160927","https://openalex.org/W2256695479","https://openalex.org/W2258698957","https://openalex.org/W2278316643","https://openalex.org/W2394619600","https://openalex.org/W2411354024","https://openalex.org/W2417203279","https://openalex.org/W2492578998","https://openalex.org/W2514891156","https://openalex.org/W2537669654","https://openalex.org/W2538865281","https://openalex.org/W2545457694","https://openalex.org/W2562533059","https://openalex.org/W2585818648","https://openalex.org/W2610939075","https://openalex.org/W2623395156","https://openalex.org/W2740209367","https://openalex.org/W2750954988","https://openalex.org/W2789980854","https://openalex.org/W2804382298","https://openalex.org/W2889246521","https://openalex.org/W2930768966","https://openalex.org/W3105794999","https://openalex.org/W4299818415"],"related_works":["https://openalex.org/W185442532","https://openalex.org/W2086515904","https://openalex.org/W4313261984","https://openalex.org/W2966027630","https://openalex.org/W2061716669","https://openalex.org/W4304943319","https://openalex.org/W2166222264","https://openalex.org/W1974991139","https://openalex.org/W4308300903","https://openalex.org/W104333925"],"abstract_inverted_index":{"Users":[0],"receive":[1],"a":[2,82,171,175,191,194,212],"multitude":[3],"of":[4,89,92,99,127,154,186,211],"security":[5,12,26,54,93,102,128,159,167,229],"information":[6,44,68],"in":[7,78,105,158,207],"written":[8],"articles,":[9],"e.g.,":[10],"newspapers,":[11],"blogs,":[13],"and":[14,48,56,200],"training":[15],"materials.":[16],"However,":[17],"prior":[18],"research":[19],"suggests":[20],"that":[21,40,70,97,125,139,221],"these":[22],"delivery":[23],"methods,":[24],"including":[25,142],"awareness":[27,55],"campaigns,":[28],"mostly":[29],"fail":[30],"to":[31,46,51,61,85,113,165,173,196,204,215,227],"increase":[32,224],"people's":[33],"knowledge":[34],"about":[35],"cyber":[36],"threats.":[37],"It":[38],"seems":[39],"users":[41,64],"find":[42,96],"such":[43,134],"challenging":[45],"absorb":[47],"understand.":[49],"Yet,":[50],"raise":[52],"users'":[53,90,163,225],"understanding,":[57],"it":[58,76,222],"is":[59],"essential":[60],"ensure":[62],"the":[63,66,74,87,100,111,143,155,184,187,205,217],"comprehend":[65],"provided":[67],"so":[69],"they":[71],"can":[72],"apply":[73],"advice":[75],"contains":[77],"practice.":[79],"We":[80,95,122],"conducted":[81],"subjective":[83,213],"study":[84,214],"measure":[86,216],"level":[88],"understanding":[91],"texts.":[94,160],"61%":[98],"terms":[101,156,199],"experts":[103],"used":[104],"their":[106,202],"writings":[107],"are":[108],"hard":[109],"for":[110,116],"public":[112],"understand,":[114],"even":[115],"people":[117],"with":[118],"some":[119],"IT":[120],"backgrounds.":[121],"also":[123],"observe":[124],"88%":[126],"texts":[129],"have":[130],"at":[131],"least":[132],"one":[133],"term.":[135],"Moreover,":[136],"we":[137,169,189],"notice":[138],"existing":[140],"dictionaries,":[141],"online":[144],"ones":[145],"(e.g.,":[146],"Google":[147],"Dictionary),":[148],"cover":[149],"no":[150],"more":[151],"than":[152],"35%":[153],"found":[157],"To":[161,182],"improve":[162],"ability":[164,226],"understand":[166,228],"texts,":[168],"developed":[170,190],"framework":[172],"build":[174],"user-oriented":[176],"security-centric":[177],"dictionary":[178],"from":[179],"multiple":[180],"sources.":[181],"evaluate":[183],"effectiveness":[185],"dictionary,":[188],"tool":[192],"as":[193],"service":[195],"detect":[197],"technical":[198],"explain":[201],"meanings":[203],"user":[206],"pop-ups.":[208],"The":[209],"results":[210],"tool's":[218],"performance":[219],"showed":[220],"could":[223],"articles":[230],"by":[231],"30%.":[232]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
