{"id":"https://openalex.org/W4387628489","doi":"https://doi.org/10.1145/3617072.3617117","title":"Divergences in Blame Attribution after a Security Breach based on Compliance Behavior: Implications for Post-breach Risk Communication","display_name":"Divergences in Blame Attribution after a Security Breach based on Compliance Behavior: Implications for Post-breach Risk Communication","publication_year":2023,"publication_date":"2023-10-13","ids":{"openalex":"https://openalex.org/W4387628489","doi":"https://doi.org/10.1145/3617072.3617117"},"language":"en","primary_location":{"id":"doi:10.1145/3617072.3617117","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3617072.3617117","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 European Symposium on Usable Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024381583","display_name":"Ehsan Ul Haque","orcid":"https://orcid.org/0000-0001-6715-9882"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ehsan Ul Haque","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Connecticut, United States"],"raw_orcid":"https://orcid.org/0000-0001-6715-9882","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Connecticut, United States","institution_ids":["https://openalex.org/I140172145"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030524188","display_name":"Mohammad Maifi Hasan Khan","orcid":"https://orcid.org/0000-0001-5046-4100"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Maifi Hasan Khan","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Connecticut, USA"],"raw_orcid":"https://orcid.org/0000-0001-5046-4100","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Connecticut, USA","institution_ids":["https://openalex.org/I140172145"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031527193","display_name":"Md Fahim","orcid":"https://orcid.org/0000-0002-5401-3689"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Abdullah Al Fahim","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Connecticut, USA"],"raw_orcid":"https://orcid.org/0000-0002-5401-3689","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Connecticut, USA","institution_ids":["https://openalex.org/I140172145"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013318451","display_name":"Theodore Jensen","orcid":"https://orcid.org/0000-0003-4969-4456"},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Theodore Jensen","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Connecticut, USA"],"raw_orcid":"https://orcid.org/0000-0003-4969-4456","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Connecticut, USA","institution_ids":["https://openalex.org/I140172145"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I140172145"],"apc_list":null,"apc_paid":null,"fwci":2.8893,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.92423028,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"27","last_page":"47"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12268","display_name":"Deception detection and forensic psychology","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/blame","display_name":"Blame","score":0.7827197313308716},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.6963520646095276},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.6869322657585144},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.5748313665390015},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5388355851173401},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.37609511613845825},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.3245006203651428},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.2979046106338501}],"concepts":[{"id":"https://openalex.org/C2781466463","wikidata":"https://www.wikidata.org/wiki/Q621695","display_name":"Blame","level":2,"score":0.7827197313308716},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.6963520646095276},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.6869322657585144},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.5748313665390015},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5388355851173401},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.37609511613845825},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3245006203651428},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.2979046106338501}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3617072.3617117","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3617072.3617117","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 European Symposium on Usable Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.699999988079071}],"awards":[{"id":"https://openalex.org/G6211510983","display_name":"CAREER: The Role of Emotion and Social Motives in Communicating Risk: Implications for User Behavior in the Cyber Security Context","funder_award_id":"1750908","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1944720853","https://openalex.org/W1966222484","https://openalex.org/W1971295515","https://openalex.org/W1990216883","https://openalex.org/W2024489070","https://openalex.org/W2025553284","https://openalex.org/W2045591401","https://openalex.org/W2061592058","https://openalex.org/W2071572122","https://openalex.org/W2073220979","https://openalex.org/W2073634068","https://openalex.org/W2080132021","https://openalex.org/W2114073616","https://openalex.org/W2126360800","https://openalex.org/W2144981153","https://openalex.org/W2165072427","https://openalex.org/W2169371034","https://openalex.org/W2293424065","https://openalex.org/W2503241677","https://openalex.org/W2756558559","https://openalex.org/W2795944085","https://openalex.org/W2798782357","https://openalex.org/W2941057822","https://openalex.org/W2964832977","https://openalex.org/W2966902611","https://openalex.org/W2987666365","https://openalex.org/W2991214313","https://openalex.org/W3044016611","https://openalex.org/W3048223477","https://openalex.org/W3087920328","https://openalex.org/W3211626192","https://openalex.org/W4230953517","https://openalex.org/W4253305575","https://openalex.org/W4280579350","https://openalex.org/W4298185589","https://openalex.org/W4307056296","https://openalex.org/W4366548575","https://openalex.org/W6815412490","https://openalex.org/W6819083493"],"related_works":["https://openalex.org/W155568406","https://openalex.org/W4231203413","https://openalex.org/W2327855345","https://openalex.org/W58484785","https://openalex.org/W1966145232","https://openalex.org/W3087920328","https://openalex.org/W4243387025","https://openalex.org/W2608958079","https://openalex.org/W4386499968","https://openalex.org/W4296687003"],"abstract_inverted_index":{"\u201cAttribution":[0],"of":[1,16,35,54,75,85,145,160,193,214],"self-blame\u201d":[2],"is":[3,12,46,207],"a":[4,24,89,94],"spontaneous":[5],"affective":[6],"and":[7,11,18,38,50,139,201,220],"cognitive":[8],"self-evaluative":[9],"reaction":[10],"an":[13],"important":[14],"predictor":[15],"proactive":[17],"positive":[19],"coping":[20],"response":[21],"behavior":[22,40],"after":[23,88],"negative":[25],"event.":[26],"While":[27],"blame":[28,55,86,206],"attribution":[29,56,87],"can":[30,71],"indeed":[31],"affect":[32,204],"the":[33,42,52,73,83,122,125,129,133,137,140,143,158,161,177,182,187,227],"efficacy":[34],"post-breach":[36,76,221],"communication":[37,223],"subsequent":[39],"in":[41,59,226],"cybersecurity":[43],"context,":[44],"it":[45],"not":[47],"clear":[48],"whether":[49],"how":[51,205],"process":[53,84],"may":[57,120],"vary":[58],"post-data":[60],"breach":[61,127],"contexts":[62],"based":[63],"on":[64,108],"users\u2019":[65],"past":[66],"security":[67],"compliance":[68],"behavior,":[69],"which":[70],"inform":[72],"design":[74],"risk":[77,222],"communication.":[78],"As":[79],"such,":[80],"to":[81,156,165,175],"examine":[82],"data":[90,126],"breach,":[91],"we":[92,149],"run":[93],"2":[95,99,103],"(user":[96],"type)":[97,101],"x":[98,102],"(account":[100],"(usage":[104],"scenario)":[105],"between-group":[106],"study":[107,114],"Amazon\u2019s":[109],"MTurk":[110],"platform.":[111],"The":[112,212],"vignette-based":[113],"scenario":[115],"incorporates":[116],"multiple":[117],"stakeholders":[118],"who":[119],"share":[121],"responsibility":[123],"for":[124,186,217],"(e.g.,":[128],"negligent":[130,167],"user":[131],"(Bob),":[132],"software":[134],"company":[135],"holding":[136],"data,":[138,148],"attacker).":[141],"From":[142],"analysis":[144],"255":[146],"participant":[147],"discover":[150],"that":[151,198],"adopters":[152],"are":[153,172,224],"more":[154,173],"likely":[155,174],"hold":[157,176],"protagonist":[159],"story":[162],"responsible":[163],"due":[164],"his":[166],"behavior.":[168],"In":[169],"contrast,":[170],"non-adopters":[171],"external":[178],"entity,":[179],"such":[180],"as":[181],"service":[183],"provider,":[184],"accountable":[185],"account":[188,199],"compromise,":[189],"exhibiting":[190],"\u201cdefensive":[191],"attribution\u201d":[192],"blame.":[194],"Results":[195],"further":[196],"indicate":[197],"types":[200],"usage":[202],"scenarios":[203],"distributed":[208],"among":[209],"different":[210],"entities.":[211],"implications":[213],"our":[215],"findings":[216],"effective":[218],"pre":[219],"discussed":[225],"paper.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-08T08:33:18.762332","created_date":"2025-10-10T00:00:00"}