Study Shows Average User Is Pretty Stupid When It Comes to Popups
September 24, 2008 8:15 AM
The new study from the North Carolina State University's Psych department shows just how dumb the average user is when it comes to computer security. The study shows users are willing to do anything, including throwing security caution to the wind, to get rid of minor annoyances.
A new study is giving computer savvy users a look at the "other" users' behavior
You often wonder how users fall for seemingly obvious ploys -- you know, the letter from Makib in Ethiopia seeking for donations for an orphanage, or perhaps the most recent
fake ticket emails that claim to have your ticket in a ZIP file
. To the computer savvy, these silly attempts might make for a good morning laugh, but security experts say there's nothing to laugh about when millions of naïve users fall for the scheme and their computers become part of a botnet, used to
launch devastating DoS attacks
A new study from the Psychology Department of North Carolina State University gives some insight into just how
easily tricked many users are
. On compromised websites one form of malware distribution is through popup windows. If users click to dismiss them, they often download malware onto their computers. So just how many users would be tricked into clicking?
The researchers crafted 4 dialog boxes and exposed 42 college students to them in a normal browsing atmosphere. Each box contained the cryptic message "The instruction at '0x77f41d24 referenced memory at '0x595c2a4c." The first one bore the markings of a standard Windows dialog, but the remainder had noticeable differences that should have warned users that it was malware.
In each of the dialogs putting the mouse over the "OK" button turned the cursor into a hand, a sign that it was a browser control, not a Windows dialog. The dialogs also all had minimize and maximize buttons. Starting with the second one, a browser status bar was added to the bottom. Finally the last one was made blatantly obvious by text that flashed from black on a white background to white on a black background.
To properly lure the college students into the ruse, they created a series of fake medical websites in Flash. The students were told they were going to be quizzed on the information on the sites after the test. The popups were then activated as the students were browsing the sites.
Of the 42 college students, 26 clicked the "OK" button on the most normal looking dialog, 25 clicked on each of the more obvious fakes, and 23 clicked on the most obvious fake, the one with the flashing text. This study should be welcome news to malware crafters -- college educated users will click obviously dangerous dialogs over 50 percent of the time.
In all only 9 users closed the dialogs. The rest minimized them, or dragged them out of the way, risky behaviors, as the next user at the computer could be exposed to the dialog. The time between the dialog appearing and the user clicking remained approximately constant for all the dialogs. This seems to indicate that the users did not even think much before clicking the foreign message.
In follow up questions, over half of students said the dialog boxes were a distraction from the task at hand and they would do anything to get rid of them. The study seems to indicate that computer exposure, with lack of understanding has bred an atmosphere where users are unsurprised by dialogs and GUIs, and care little for their contents.
While the study's authors suggested education of students to warn them of these kind of dangers, the apathy of the students towards the dialogs seems to bring the fruits of such education into question.
The study is appearing soon in the journal
Proceedings of the Human Factors and Ergonomics Society.
"My sex life is pretty good" -- Steve Jobs' random musings during the 2010 D8 conference
Hackers Inject Trojans Into Computers with Airline Ticket Scam
September 22, 2008, 10:11 AM
CNN.com Repels Hacker Attack After Coverage On Tibet
April 21, 2008, 9:55 AM
Science & Environment
February 20, 2017, 6:37 AM
The USA’s newest weather satellite sends first photos.
January 24, 2017, 6:41 AM
Netflix took a decision to invest in original content
January 19, 2017, 7:00 AM
Amazon Airborne Fulfillment Center – Your Merchandise Drop-Shipped from the Clouds
December 29, 2016, 5:00 AM
Amazon is experimenting with a new kind of grocery stores, Amazon Go
December 8, 2016, 5:00 AM
Google has developed Deep Learning Algorithm to detect Diabetic Eye Disease
December 4, 2016, 5:00 AM
Most Popular Articles
Surface Pro 5 Rumors - New Release Date and Price
April 22, 2017, 6:45 AM
SAPPHIRE PULSE Radeon RX 580 8GD5 – Great Value for the Money
April 20, 2017, 7:47 AM
Apple Watch NikeLab Limited Edition unveiled.
April 22, 2017, 6:20 AM
Dell Inspiron 17 7000 – A Premium Laptop featuring 7th Gen Intel Core i7 in a 2-in-1 Frame.
April 19, 2017, 7:45 AM
Meet the Smartphone with four cameras - Alcatel Flashphone
April 5, 2017, 11:20 AM
Latest Blog Posts
Google Android App – Huge improvement on Nighttime Photography
Apr 27, 2017, 7:40 AM
Google Co-Founder, Sergey Brin has an Airship
Apr 26, 2017, 6:43 AM
Samsung Galaxy S8 and S8 Plus – Lots of Glass that Breaks Easily
Apr 25, 2017, 7:20 AM
Samsung Galaxy S8 – Warning for Pet Owners
Apr 24, 2017, 5:59 AM
Sound Bars and the Costs?
Apr 23, 2017, 6:30 AM
Link your Brain to Your Computer – In Four Years…Maybe
Apr 22, 2017, 7:03 AM
Google Home can now identify users by their voice.
Apr 21, 2017, 7:15 AM
Amazon Lex – Now Available for Developers.
Apr 20, 2017, 6:58 AM
You can now use Instagram offline on your Android Smartphone
Apr 19, 2017, 8:00 AM
Now you can livestream to YouTube from your mobile device.
Apr 18, 2017, 8:05 AM
Google Home – Is It a Spy Device?
Apr 17, 2017, 7:30 AM
Apple added to self –driving test permit list
Apr 15, 2017, 6:21 AM
Project Scorpio – Coming on June 11
Apr 14, 2017, 6:20 AM
Looks Like Samsung Has Been Forgiven.
Apr 13, 2017, 6:50 AM
United Airlines - Blasted on China’s Social Network and the Stock Market
Apr 12, 2017, 6:50 AM
Amazon's Third-Party Sellers Hacked
Apr 11, 2017, 6:25 AM
Microsoft Surface Pro5 Details Revealed
Apr 9, 2017, 6:41 AM
Own An Android Phone? Then you could be hacked over Wi-FI
Apr 7, 2017, 6:47 AM
Apple confirms iOS 10.3 bug and its effect on iCloud Services
Apr 6, 2017, 6:30 AM
Apple Rolls Out New Version of Apple Music
Apr 5, 2017, 10:35 AM
Apple in the News
Apr 4, 2017, 9:03 AM
Apple iPhones Will Soon Feature Graphics Chips Designed BY Apple
Apr 3, 2017, 6:23 AM
More Blog Posts
Copyright 2017 DailyTech LLC. -
Terms, Conditions & Privacy Information