{"id":"https://openalex.org/W4409883746","doi":"https://doi.org/10.1145/3706598.3713547","title":"Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns","display_name":"Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns","publication_year":2025,"publication_date":"2025-04-25","ids":{"openalex":"https://openalex.org/W4409883746","doi":"https://doi.org/10.1145/3706598.3713547"},"language":"en","primary_location":{"id":"doi:10.1145/3706598.3713547","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706598.3713547","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706598.3713547","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3706598.3713547","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083310097","display_name":"Yusra Elbitar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]},{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yusra Elbitar","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbruecken, Germany and Saarland University, Saarbruecken, Germany"],"raw_orcid":"https://orcid.org/0009-0007-8787-2950","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbruecken, Germany and Saarland University, Saarbruecken, Germany","institution_ids":["https://openalex.org/I4210128801","https://openalex.org/I91712215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089070556","display_name":"Soheil Khodayari","orcid":"https://orcid.org/0009-0006-1052-4774"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]},{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Soheil Khodayari","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbruecken, Germany and Saarland University, Saarbruecken, Germany"],"raw_orcid":"https://orcid.org/0009-0006-1052-4774","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbruecken, Germany and Saarland University, Saarbruecken, Germany","institution_ids":["https://openalex.org/I4210128801","https://openalex.org/I91712215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013939673","display_name":"Marian Harbach","orcid":"https://orcid.org/0000-0001-8677-811X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marian Harbach","raw_affiliation_strings":["Google, Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0001-8677-811X","affiliations":[{"raw_affiliation_string":"Google, Munich, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109786593","display_name":"Gianluca De Stefano","orcid":"https://orcid.org/0009-0006-1454-2574"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gianluca De Stefano","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbruecken, Germany"],"raw_orcid":"https://orcid.org/0009-0006-1454-2574","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbruecken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044027125","display_name":"Balazs Engedy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Balazs Csaba Engedy","raw_affiliation_strings":["Google, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0008-4398-7809","affiliations":[{"raw_affiliation_string":"Google, Munich, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087556256","display_name":"Giancarlo Pellegrino","orcid":"https://orcid.org/0009-0007-6223-8945"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Giancarlo Pellegrino","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbruecken, Germany"],"raw_orcid":"https://orcid.org/0009-0007-6223-8945","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbruecken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085053271","display_name":"Sven Bugiel","orcid":"https://orcid.org/0000-0002-7151-9614"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sven Bugiel","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbruecken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-7151-9614","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbruecken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"25"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.8811795115470886},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6827514171600342},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5062498450279236},{"id":"https://openalex.org/keywords/ecosystem","display_name":"Ecosystem","score":0.4435585141181946},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.10718879103660583}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.8811795115470886},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6827514171600342},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5062498450279236},{"id":"https://openalex.org/C110872660","wikidata":"https://www.wikidata.org/wiki/Q37813","display_name":"Ecosystem","level":2,"score":0.4435585141181946},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.10718879103660583},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3706598.3713547","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706598.3713547","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706598.3713547","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3706598.3713547","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3706598.3713547","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3706598.3713547","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Life in Land","score":0.44999998807907104,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409883746.pdf","grobid_xml":"https://content.openalex.org/works/W4409883746.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1991750733","https://openalex.org/W2033811191","https://openalex.org/W2092459821","https://openalex.org/W2092712591","https://openalex.org/W2107643854","https://openalex.org/W2107906795","https://openalex.org/W2136649349","https://openalex.org/W2144981153","https://openalex.org/W2168552474","https://openalex.org/W2288633271","https://openalex.org/W2604458809","https://openalex.org/W2604764484","https://openalex.org/W2611328191","https://openalex.org/W2897288043","https://openalex.org/W2898120212","https://openalex.org/W2933817227","https://openalex.org/W3021375099","https://openalex.org/W3128513378","https://openalex.org/W4205767597","https://openalex.org/W4288079443","https://openalex.org/W4302024653","https://openalex.org/W4307020316","https://openalex.org/W4320705687","https://openalex.org/W4366698663","https://openalex.org/W4396833125","https://openalex.org/W4408749790"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3176279093","https://openalex.org/W2374086689","https://openalex.org/W2373945265","https://openalex.org/W2370203001","https://openalex.org/W1912565424","https://openalex.org/W4246410201","https://openalex.org/W2385081216"],"abstract_inverted_index":{"Modern":[0],"web":[1,42,58],"applications":[2,21],"use":[3,70],"features":[4],"like":[5],"camera":[6],"and":[7,74,78,102,113],"geolocation":[8],"for":[9],"personalized":[10],"experiences,":[11],"requiring":[12],"user":[13,47,88,118,141],"permission":[14,61,76],"via":[15],"browser":[16],"prompts.To":[17],"explain":[18],"these":[19],"requests,":[20],"provide":[22],"rationales-contextual":[23],"information":[24],"on":[25,40,46,87,117],"why":[26],"permissions":[27],"are":[28],"needed.Despite":[29],"their":[30,44,81,85,115],"importance,":[31],"little":[32],"is":[33],"known":[34],"about":[35],"how":[36,56,137],"often":[37],"rationales":[38,139],"appear":[39],"the":[41,51,57,133],"or":[43],"influence":[45],"decisions.This":[48],"paper":[49],"presents":[50],"first":[52,134],"large-scale":[53],"study":[54],"of":[55,136],"ecosystem":[59],"handles":[60],"rationales,":[62,77],"covering":[63],"three":[64],"areas:":[65],"(i)":[66],"identifying":[67],"webpages":[68,93],"that":[69],"permissions,":[71],"(ii)":[72],"detecting":[73],"classifying":[75],"(iii)":[79],"analyzing":[80],"attributes":[82,112],"to":[83],"understand":[84],"impact":[86],"decisions.We":[89],"examined":[90],"over":[91],"770K":[92],"from":[94],"Chrome":[95,124],"telemetry,":[96],"finding":[97],"3.6K":[98],"unique":[99],"rationale":[100,104,111],"texts":[101],"749":[103],"UIs":[105],"across":[106],"85K":[107],"pages.We":[108],"extracted":[109],"key":[110,130],"assessed":[114],"effect":[116],"behavior":[119],"by":[120],"cross-referencing":[121],"them":[122],"with":[123],"telemetry":[125],"data.Our":[126],"findings":[127],"reveal":[128],"nine":[129],"insights,":[131],"providing":[132],"evidence":[135],"different":[138],"affect":[140],"decisions.":[142]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}