In a between-subjects study design, we compared responses from 170 online account users of two major service providers to explore issues relating to responsibility and trust for account security. Participants attributed clear roles between themselves and their service providers for preventing attacks, monitoring their accounts, and recovering their accounts. The emerging mental model of distributed responsibility does not match service providers stated terms of use. Users identified a variety of reasons for trusting different service providers, but reputation was viewed as especially important.

Additional Metadata
Persistent URL dx.doi.org/10.1109/PST47121.2019.8949041
Conference 17th International Conference on Privacy, Security and Trust, PST 2019
Citation
Abdelaziz, Y. (Yomna), Napoli, D. (Daniela), & Chiasson, S. (2019). End-Users and Service Providers: Trust and Distributed Responsibility for Account Security. In 2019 17th International Conference on Privacy, Security and Trust, PST 2019 - Proceedings. doi:10.1109/PST47121.2019.8949041