{"id":"https://openalex.org/W4376626867","doi":"https://doi.org/10.56553/popets-2023-0076","title":"Comparing Large-Scale Privacy and Security Notifications","display_name":"Comparing Large-Scale Privacy and Security Notifications","publication_year":2023,"publication_date":"2023-05-15","ids":{"openalex":"https://openalex.org/W4376626867","doi":"https://doi.org/10.56553/popets-2023-0076"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2023-0076","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2023-0076","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0076.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2023/popets-2023-0076.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025891820","display_name":"Christine Utz","orcid":"https://orcid.org/0000-0003-4346-6911"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christine Utz","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090187174","display_name":"M. A. J. Michels","orcid":"https://orcid.org/0000-0003-0267-6154"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]},{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Matthias Michels","raw_affiliation_strings":["Saarland University",", , CISPA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saarland University","institution_ids":["https://openalex.org/I91712215"]},{"raw_affiliation_string":", , CISPA","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048622314","display_name":"Martin Degeling","orcid":"https://orcid.org/0000-0001-7048-781X"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]},{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martin Degeling","raw_affiliation_strings":["Ruhr University Bochum",", , CISPA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":", , CISPA","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027496278","display_name":"Ninja Marnau","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ninja Marnau","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087823285","display_name":"Ben Stock","orcid":"https://orcid.org/0000-0001-9659-0700"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ben Stock","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.0348,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.97193068,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"2023","issue":"3","first_page":"173","last_page":"193"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.986299991607666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9847000241279602,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.7403811812400818},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.6001947522163391},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5341265201568604},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5136584639549255},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"Personally identifiable information","score":0.500572919845581},{"id":"https://openalex.org/keywords/directive","display_name":"Directive","score":0.4759773313999176},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.46836721897125244},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.439619779586792},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.41991904377937317},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.41538557410240173},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.4121597111225128}],"concepts":[{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.7403811812400818},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.6001947522163391},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5341265201568604},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5136584639549255},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.500572919845581},{"id":"https://openalex.org/C2779547435","wikidata":"https://www.wikidata.org/wiki/Q1121492","display_name":"Directive","level":2,"score":0.4759773313999176},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46836721897125244},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.439619779586792},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.41991904377937317},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.41538557410240173},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.4121597111225128},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.56553/popets-2023-0076","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2023-0076","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0076.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/24614640","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/Comparing_Large-Scale_Privacy_and_Security_Notifications/24614640","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},{"id":"doi:10.60882/cispa.24614640.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.24614640.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferenceProceeding"}],"best_oa_location":{"id":"doi:10.56553/popets-2023-0076","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2023-0076","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0076.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4376626867.pdf"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W48212787","https://openalex.org/W1720840691","https://openalex.org/W1998843210","https://openalex.org/W2112736324","https://openalex.org/W2114398364","https://openalex.org/W2116696275","https://openalex.org/W2121044470","https://openalex.org/W2184587911","https://openalex.org/W2290195878","https://openalex.org/W2463495559","https://openalex.org/W2505207162","https://openalex.org/W2535603283","https://openalex.org/W2541820485","https://openalex.org/W2564812877","https://openalex.org/W2733681384","https://openalex.org/W2794007494","https://openalex.org/W2800590803","https://openalex.org/W2801490189","https://openalex.org/W2943394524","https://openalex.org/W2947192195","https://openalex.org/W2963611340","https://openalex.org/W3000190958","https://openalex.org/W3015767612","https://openalex.org/W3086543672","https://openalex.org/W3092929801","https://openalex.org/W3094598403","https://openalex.org/W3101347435","https://openalex.org/W3105667739","https://openalex.org/W3106386337","https://openalex.org/W3166075596","https://openalex.org/W3175349171","https://openalex.org/W3177181460","https://openalex.org/W3194644147","https://openalex.org/W3216667748","https://openalex.org/W4288086187","https://openalex.org/W4298353238","https://openalex.org/W4315706085"],"related_works":["https://openalex.org/W2295836226","https://openalex.org/W4225340788","https://openalex.org/W2025792237","https://openalex.org/W2272742059","https://openalex.org/W2940702331","https://openalex.org/W2480449659","https://openalex.org/W1993866990","https://openalex.org/W1996189363","https://openalex.org/W2036646121","https://openalex.org/W4245303888"],"abstract_inverted_index":{"Over":[0],"the":[1,71,76,151,159,234],"last":[2],"decade,":[3],"web":[4,16],"security":[5,19,101,162,200],"research":[6,106],"has":[7],"used":[8],"notification":[9,114],"campaigns":[10],"as":[11,64,196,199],"a":[12,83,110,126,185,221],"tool":[13],"to":[14,31,67,98,164,210,232],"help":[15],"operators":[17,181],"fix":[18,206],"problems":[20],"or":[21,38,75,134],"stop":[22],"infrastructure":[23],"abuse.":[24],"First":[25],"attempts":[26],"at":[27,61],"applying":[28],"this":[29,105],"approach":[30],"privacy":[32,59,84,91,127,192,228],"issues":[33,193],"focused":[34],"on":[35,175],"single":[36],"services":[37],"vendors.":[39],"Hence,":[40],"little":[41],"is":[42,87],"known":[43],"if":[44],"notifications":[45,92,163,190],"can":[46],"also":[47,88],"raise":[48],"awareness":[49,224],"and":[50,94,138,157,178,184,214,225,236],"encourage":[51],"remediation":[52],"of":[53,58,125,130,153,223,227],"more":[54,117,165,215],"complex,":[55],"vendor-independent":[56],"violations":[57],"legislation":[60],"scale,":[62],"such":[63],"informed":[65,136],"consent":[66],"cookie":[68],"usage":[69],"under":[70],"EU's":[72],"ePrivacy":[73],"Directive":[74],"General":[77],"Data":[78],"Protection":[79],"Regulation's":[80],"requirement":[81],"for":[82,141],"policy.":[85],"It":[86],"unclear":[89],"how":[90],"perform":[93],"are":[95,194],"perceived":[96],"compared":[97],"those":[99],"about":[100,123,155,169,191],"vulnerabilities.":[102],"To":[103],"fill":[104],"gap,":[107],"we":[108,121,187],"conduct":[109],"large-scale,":[111],"automated":[112],"email":[113,183],"study":[115],"with":[116,161,180],"than":[118,166],"115K":[119],"websites":[120],"notify":[122],"lack":[124,222],"policy,":[128],"use":[129,147],"third-party":[131],"cookies":[132],"without":[133],"before":[135],"consent,":[137],"input":[139],"forms":[140],"personal":[142],"data":[143],"that":[144,189],"do":[145],"not":[146,195],"HTTPS.":[148],"We":[149],"investigate":[150],"impact":[152],"warnings":[154],"fines":[156],"compare":[158],"results":[160],"40K":[167],"domains":[168],"openly":[170],"accessible":[171],"Git":[172],"repositories.":[173],"Based":[174],"our":[176],"measurements":[177],"interactions":[179],"through":[182],"survey,":[186],"find":[188],"well":[197],"received":[198],"notifications.":[201],"They":[202],"result":[203],"in":[204],"lower":[205],"rates,":[207],"less":[208],"incentive":[209],"take":[211],"immediate":[212],"action,":[213],"negative":[216],"feedback.":[217],"Specific":[218],"reasons":[219],"include":[220],"knowledge":[226],"laws'":[229],"applicability,":[230],"difficulties":[231],"pinpoint":[233],"problem,":[235],"limited":[237],"intrinsic":[238],"motivation.":[239]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}