{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T01:19:07Z","timestamp":1792804747286,"version":"4.5.0"},"reference-count":124,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833643","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"2344-2360","source":"Crossref","is-referenced-by-count":64,"title":["SoK: A Framework for Unifying At-Risk User Research"],"prefix":"10.1109","author":[{"given":"Noel","family":"Warford","sequence":"first","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tara","family":"Matthews","sequence":"additional","affiliation":[{"name":"Google"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kaitlyn","family":"Yang","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Omer","family":"Akgul","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sunny","family":"Consolvo","sequence":"additional","affiliation":[{"name":"Google"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick Gage","family":"Kelley","sequence":"additional","affiliation":[{"name":"Google"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nathan","family":"Malkin","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michelle L.","family":"Mazurek","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Manya","family":"Sleeper","sequence":"additional","affiliation":[{"name":"Google"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kurt","family":"Thomas","sequence":"additional","affiliation":[{"name":"Google"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyaa006"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376339"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2017-0022"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3443686"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300537"},{"key":"ref52","first-page":"1","article-title":"No telling passcodes out because they&#x2019;re private","volume":"1","author":"kumar","year":"2017","journal-title":"Understanding children&#x2019;s mental models of privacy and security online PACM HCI"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00019"},{"key":"ref54","article-title":"How effective is anti-phishing training for children?","author":"lastdrager","year":"2017","journal-title":"Proc SOUPS"},{"key":"ref51","first-page":"350","article-title":"Testing the reliability of content analysis data: What is involved and why","author":"krippendorff","year":"2009","journal-title":"The Content Analysis Reader"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300669"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3359230"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025859"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300569"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376611"},{"key":"ref42","article-title":"Clinical computer security for victims of intimate partner violence","author":"havron","year":"2019","journal-title":"Proc Usenix Security"},{"key":"ref41","article-title":"Gender recognition or gender reductionism? The social implications of embedded gender recognition systems","author":"hamidi","year":"2018","journal-title":"Proc CHI"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1719030.1719050"},{"key":"ref43","article-title":"Cooperative privacy and security: Learning from people with visual impairments and their allies","author":"hayes","year":"2019","journal-title":"Proc SOUPS"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858186"},{"key":"ref8","article-title":"Security practices for households bank customers in the Kingdom of Saudi Arabia","author":"alghamdi","year":"2015","journal-title":"Proc SOUPS"},{"key":"ref7","article-title":"&#x2022;I am uncomfortable sharing what I can&#x2019;t see&#x2022;: Privacy concerns of the visually impaired with camera based assistive applications","author":"akter","year":"2020","journal-title":"Proc Usenix Security"},{"key":"ref9","first-page":"1","article-title":"On making data actionable: How activists use imperfect data to foster social change for human rights violations in Mexico","volume":"1","author":"garcia","year":"2017","journal-title":"PACM HCI"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300410"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025961"},{"key":"ref6","article-title":"Addressing physical safety, security, and privacy for people with visual impairments","author":"ahmed","year":"2016","journal-title":"Proc SOUPS"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702334"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300882"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858153"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173688"},{"key":"ref35","article-title":"A Stalker&#x2019;s Paradise&#x201D;: How intimate partner abusers exploit technology","author":"freed","year":"2018","journal-title":"Proc CHI"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3134681"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173698"},{"key":"ref36","article-title":"Privacy and security threat models and mitigation strategies of older adults","author":"frik","year":"2019","journal-title":"Proc SOUPS"},{"key":"ref31","article-title":"Straight talk: New Yorkers on mobile messaging and implications for privacy","author":"elliott","year":"2015","journal-title":"Technical report Simply Secure"},{"key":"ref30","article-title":"DatashareNetwork: A decentralized privacy-preserving search engine for investigative journalists","author":"edalatnejad","year":"2020","journal-title":"Proc Usenix Security"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3359304"},{"key":"ref32","article-title":"Blind and human: Exploring more usable audio CAPTCHA designs","author":"fanelle","year":"2020","journal-title":"Proc SOUPS"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376747"},{"key":"ref38","article-title":"Matter of control or safety? Examining parental use of technical monitoring apps on teens&#x2019; mobile devices","author":"ghosh","year":"2018","journal-title":"Proc CHI"},{"key":"ref24","first-page":"139","article-title":"Demarginalizing the intersection of race and sex: A Black feminist critique of antidiscrimination doctrine, feminist theory and antiracist politics","author":"crenshaw","year":"1989","journal-title":"The University of Chicago Legal Forum"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.21606\/drs.2018.679"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1891\/0886-6708.15.4.473"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00055"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3134670"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2818048.2819960"},{"key":"ref21","article-title":"Why wouldn&#x2019;t someone think of democracy as a target?&#x201D;: Security practices & challenges of people involved with U.S. political campaigns","author":"consolvo","year":"2021","journal-title":"Proc Usenix Security"},{"key":"ref28","article-title":"Lessons learnt from comparing WhatsApp privacy concerns across Saudi and Indian populations","author":"dev","year":"2020","journal-title":"Proc SOUPS"},{"key":"ref27","author":"dent","year":"2020","journal-title":"Security firm details how hackers stole $1 3 million in wire transfers"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2683467.2683475"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445378"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300497"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3134659"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1080\/23294515.2019.1568320"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300319"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00023"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1054972.1054998"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376881"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300336"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858096"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2016.84"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp063oa"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858342"},{"key":"ref19","article-title":"Computer security and privacy in the interactions between victim service providers and human trafficking survivors","author":"chen","year":"2019","journal-title":"Proc Usenix Security"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00061"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025766"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/3479512"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173960"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/3274425"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/3274424"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376889"},{"key":"ref89","article-title":"Privacy is not for me, it&#x2019;s for those rich women&#x201D;: Performative privacy practices on mobile phones by women in South Asia","author":"sambasivan","year":"2018","journal-title":"Proc SOUPS"},{"key":"ref86","article-title":"&#x2018;I have too much respect for my elders&#x2019;: Understanding South African mobile users&#x2019; perceptions of privacy and current behaviors on Facebook and WhatsApp","author":"reichel","year":"2020","journal-title":"Proc Usenix Security"},{"key":"ref85","article-title":"A comprehensive quality evaluation of security and privacy advice on the web","author":"redmiles","year":"2020","journal-title":"Proc Usenix Security"},{"key":"ref88","article-title":"They don&#x2019;t leave us alone anywhere we go&#x201D;: Gender and digital abuse in South Asia","author":"sambasivan","year":"2019","journal-title":"Proc CHI"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/3134726"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3134722"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376573"},{"key":"ref84","article-title":"Where is the digital divide? a survey of security, privacy, and socioeconomics","author":"redmiles","year":"2017","journal-title":"Proc CHI"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978307"},{"key":"ref80","article-title":"National Institute of Standards and Technology","year":"2020","journal-title":"Digital identity guidelines Technical Report National Institute of Standards and Technology Special Publication 800-63-3 U S Department of Commerce"},{"key":"ref79","article-title":"Towards understanding privacy and trust in online reporting of sexual assault","author":"obada-obieh","year":"2020","journal-title":"Proc SOUPS"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/3209811.3209818"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300579"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300302"},{"key":"ref106","year":"2018","journal-title":"U S Federal Bureau of Investigation Business e-mail compromise the 12 billion dollar scam"},{"key":"ref107","year":"2021","journal-title":"U S Federal Bureau of Investigation FBI Tech Tuesday Strong passphrases and account protection"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3274304"},{"key":"ref104","first-page":"1","article-title":"They just don&#x2019;t get it&#x201D;: Towards social technologies for coping with interpersonal racism","volume":"4","author":"to","year":"2020","journal-title":"PACM HCI"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025735"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445589"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025587"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1177\/1098214005283748"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300573"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00028"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3134652"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/322796.322806"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3134711"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/3358904"},{"key":"ref70","first-page":"1","article-title":"Would you Slack that? The impact of security and privacy on cooperative newsroom work","volume":"1","author":"mcgregor","year":"2017","journal-title":"PACM HCI"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300254"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025861"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174097"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/3274445"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2016-0048"},{"key":"ref119","article-title":"Parents just don&#x2019;t understand: Why teens don&#x2019;t talk to parents about their online risk experiences","author":"wisniewski","year":"2017","journal-title":"Proc CSCW 2017"},{"key":"ref67","article-title":"Investigating the computer security practices and needs of journalists","author":"mcgregor","year":"2015","journal-title":"Proc Usenix Security"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376763"},{"key":"ref69","article-title":"When the weakest link is strong: Secure collaboration in the case of the Panama Papers","author":"mcgregor","year":"2017","journal-title":"Proc Usenix Security"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/2998181.2998352"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1086\/426800"},{"key":"ref115","article-title":"Intuitions, analytics, and killing ants: Inference literacy of high school-educated adults in the US","author":"warshaw","year":"2016","journal-title":"Proc SOUPS"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025875"},{"key":"ref116","article-title":"Too much knowledge? Security beliefs and protective behaviors among United States internet users","author":"wash","year":"2015","journal-title":"Proc SOUPS"},{"key":"ref66","article-title":"Realizing choice: Online safeguards for couples adapting to cognitive challenges","author":"mcdonald","year":"2020","journal-title":"Proc SOUPS"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/3274450"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3334480.3375174"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376150"},{"key":"ref60","article-title":"When governments hack opponents: A look at actors and technology","author":"marczak","year":"2014","journal-title":"Proc Usenix Security"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3134748"},{"key":"ref123","article-title":"From therapy to teletherapy: Relocating mental health services online","volume":"5","author":"yamamoto","year":"2021","journal-title":"PACM HCI"},{"key":"ref62","article-title":"She&#x2019;ll just grab any device that&#x2019;s closer&#x201D;: A study of everyday device & account sharing in households","author":"matthews","year":"2016","journal-title":"Proc CHI"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858317"},{"key":"ref61","article-title":"Learning system-assigned passwords: A preliminary study on the people with learning disabilities","author":"marne","year":"2017","journal-title":"Proc SOUPS"},{"key":"ref121","author":"wong","year":"2021","journal-title":"Wait what the heck is a &#x2018;parasocial relationship&#x2019;?"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833643.pdf?arnumber=9833643","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:06:14Z","timestamp":1699484774000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833643\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":124,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833643","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}