{"id":"https://openalex.org/W4387331244","doi":"https://doi.org/10.1145/3610193","title":"Investigating Security Folklore: A Case Study on the Tor over VPN Phenomenon","display_name":"Investigating Security Folklore: A Case Study on the Tor over VPN Phenomenon","publication_year":2023,"publication_date":"2023-09-28","ids":{"openalex":"https://openalex.org/W4387331244","doi":"https://doi.org/10.1145/3610193"},"language":"en","primary_location":{"id":"doi:10.1145/3610193","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3610193","pdf_url":null,"source":{"id":"https://openalex.org/S4210183893","display_name":"Proceedings of the ACM on Human-Computer Interaction","issn_l":"2573-0142","issn":["2573-0142"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Human-Computer Interaction","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/journal_contribution/Investigating_Security_Folklore_A_Case_Study_on_the_Tor_over_VPN_Phenomenon/24612630","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006176699","display_name":"Matthias Fassl","orcid":"https://orcid.org/0000-0002-2894-3751"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Matthias Fassl","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-2894-3751","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004566185","display_name":"Alexander Ponticello","orcid":"https://orcid.org/0000-0001-6119-9701"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Ponticello","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0001-6119-9701","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001128549","display_name":"Adrian Dabrowski","orcid":"https://orcid.org/0000-0002-0340-6204"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Adrian Dabrowski","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-0340-6204","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072958313","display_name":"Katharina Krombholz","orcid":"https://orcid.org/0000-0003-2425-3013"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Katharina Krombholz","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2425-3013","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5006176699"],"corresponding_institution_ids":["https://openalex.org/I4210128801"],"apc_list":null,"apc_paid":null,"fwci":0.9962,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.81063346,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"7","issue":"CSCW2","first_page":"1","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/folklore","display_name":"Folklore","score":0.877088189125061},{"id":"https://openalex.org/keywords/phenomenon","display_name":"Phenomenon","score":0.7149103879928589},{"id":"https://openalex.org/keywords/misinformation","display_name":"Misinformation","score":0.6898043751716614},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5987933874130249},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5729483962059021},{"id":"https://openalex.org/keywords/mythology","display_name":"Mythology","score":0.5383976101875305},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3995411694049835},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.25432682037353516},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.12158173322677612},{"id":"https://openalex.org/keywords/art","display_name":"Art","score":0.1059904396533966},{"id":"https://openalex.org/keywords/literature","display_name":"Literature","score":0.08241978287696838}],"concepts":[{"id":"https://openalex.org/C105297191","wikidata":"https://www.wikidata.org/wiki/Q36192","display_name":"Folklore","level":2,"score":0.877088189125061},{"id":"https://openalex.org/C50335755","wikidata":"https://www.wikidata.org/wiki/Q483247","display_name":"Phenomenon","level":2,"score":0.7149103879928589},{"id":"https://openalex.org/C2776990098","wikidata":"https://www.wikidata.org/wiki/Q13579947","display_name":"Misinformation","level":2,"score":0.6898043751716614},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5987933874130249},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5729483962059021},{"id":"https://openalex.org/C519517224","wikidata":"https://www.wikidata.org/wiki/Q12827256","display_name":"Mythology","level":2,"score":0.5383976101875305},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3995411694049835},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.25432682037353516},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.12158173322677612},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.1059904396533966},{"id":"https://openalex.org/C124952713","wikidata":"https://www.wikidata.org/wiki/Q8242","display_name":"Literature","level":1,"score":0.08241978287696838},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3610193","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3610193","pdf_url":null,"source":{"id":"https://openalex.org/S4210183893","display_name":"Proceedings of the ACM on Human-Computer Interaction","issn_l":"2573-0142","issn":["2573-0142"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Human-Computer Interaction","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/24612630","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Investigating_Security_Folklore_A_Case_Study_on_the_Tor_over_VPN_Phenomenon/24612630","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"doi:10.60882/cispa.24612630.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.24612630.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/24612630","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Investigating_Security_Folklore_A_Case_Study_on_the_Tor_over_VPN_Phenomenon/24612630","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},"sustainable_development_goals":[{"score":0.75,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323322","display_name":"Universit\u00e4t des Saarlandes","ror":"https://ror.org/01jdpyv68"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1488030573","https://openalex.org/W1879677957","https://openalex.org/W1971295515","https://openalex.org/W1975097308","https://openalex.org/W1979290264","https://openalex.org/W1997475706","https://openalex.org/W2000965110","https://openalex.org/W2001554305","https://openalex.org/W2028509822","https://openalex.org/W2042720915","https://openalex.org/W2099536489","https://openalex.org/W2149756969","https://openalex.org/W2537669654","https://openalex.org/W2538520193","https://openalex.org/W2545457694","https://openalex.org/W2551244268","https://openalex.org/W2624735790","https://openalex.org/W2722360008","https://openalex.org/W2759725717","https://openalex.org/W2765204830","https://openalex.org/W2790630354","https://openalex.org/W2793785670","https://openalex.org/W2887946565","https://openalex.org/W2891651011","https://openalex.org/W2896797341","https://openalex.org/W2902834429","https://openalex.org/W2999421257","https://openalex.org/W3017863658","https://openalex.org/W3029799483","https://openalex.org/W3030764550","https://openalex.org/W3032043542","https://openalex.org/W3131740479","https://openalex.org/W3157409099","https://openalex.org/W3163486598","https://openalex.org/W4226095654","https://openalex.org/W4288057733","https://openalex.org/W4361757617","https://openalex.org/W4366550307","https://openalex.org/W4366729216","https://openalex.org/W6600340491"],"related_works":["https://openalex.org/W2389103849","https://openalex.org/W563536027","https://openalex.org/W2354580412","https://openalex.org/W3197131596","https://openalex.org/W3175013171","https://openalex.org/W4390616380","https://openalex.org/W2072532867","https://openalex.org/W2382778532","https://openalex.org/W4236376841","https://openalex.org/W2383970674"],"abstract_inverted_index":{"Users":[0],"face":[1],"security":[2,12,35,41,130,137,142],"folklore":[3,36],"in":[4,8,46,128],"their":[5,97],"daily":[6],"lives":[7],"the":[9,23,50,57,65,92,121],"form":[10],"of":[11,34,38,52,75],"advice,":[13],"myths,":[14],"and":[15,43,71,82,100,111,123,140,144],"word-of-mouth":[16],"stories.":[17],"Using":[18],"a":[19,73,114],"VPN":[20],"to":[21,88,135],"access":[22],"Tor":[24,27,69,93],"network,":[25],"i.e.,":[26],"over":[28],"VPN,":[29],"is":[30],"an":[31],"interesting":[32],"example":[33],"because":[37],"its":[39,44],"inconclusive":[40],"benefits":[42],"occurrence":[45],"pop-culture":[47],"media.":[48],"Following":[49],"Theory":[51],"Reasoned":[53],"Action,":[54],"we":[55,63,78,102],"investigated":[56],"phenomenon":[58],"with":[59],"three":[60],"studies:":[61],"(1)":[62],"quantified":[64],"behavior":[66],"on":[67],"real-world":[68],"traffic":[70],"measured":[72],"prevalence":[74],"6.23%;":[76],"(2)":[77],"surveyed":[79],"users'":[80],"intentions":[81],"beliefs,":[83],"discovering":[84],"that":[85,108],"they":[86],"try":[87],"protect":[89],"themselves":[90],"from":[91],"network":[94],"or":[95],"increase":[96],"general":[98],"security;":[99],"(3)":[101],"analyzed":[103],"online":[104],"information":[105],"sources,":[106],"suggesting":[107],"perceived":[109],"norms":[110],"ease-of-use":[112],"play":[113],"significant":[115],"role":[116],"while":[117],"behavioral":[118],"beliefs":[119],"about":[120],"purpose":[122],"effect":[124],"are":[125],"less":[126],"crucial":[127],"spreading":[129],"folklore.":[131],"We":[132],"discuss":[133],"how":[134],"communicate":[136],"advice":[138],"effectively":[139],"combat":[141],"misinformation":[143],"misconceptions.":[145]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T09:19:25.381259","created_date":"2025-10-10T00:00:00"}
