{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,28]],"date-time":"2026-05-28T19:06:18Z","timestamp":1779995178680,"version":"3.53.1"},"reference-count":38,"publisher":"MDPI AG","issue":"7","license":[{"start":{"date-parts":[[2022,7,14]],"date-time":"2022-07-14T00:00:00Z","timestamp":1657756800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Union","award":["769033"],"award-info":[{"award-number":["769033"]}]},{"name":"European Union","award":["833742"],"award-info":[{"award-number":["833742"]}]},{"name":"European Union","award":["875530"],"award-info":[{"award-number":["875530"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>Modern technology and the digitisation era accelerated the pace of data generation and collection for various purposes. The orchestration of such data is a daily challenge faced by even experienced professional users in the context of Internet of Things (IoT)-enabled environments, especially when it comes to cybersecurity and privacy risks. This article presents the application of a user-centric process for the visualisation of automated decision making security interventions. The user interface (UI) development was guided by iterative feedback collection from user studies on the visualisation of a dynamic risk assessment (DRA)-based security solution for regular lay users. The methodology we applied starts with the definition of the methodological process to map possible technical actions to related usable actions. The definition and refinement of the user interface (UI) was controlled by the survey feedback loop from end user studies on their general technological knowledge, experience with smart homes, cybersecurity awareness and privacy preservation needs. We continuously improved the visualisation interfaces for configuring a cybersecurity solution and adjusting usable transparency of the control and monitoring of the dynamic risk assessment (DRA). For this purpose, we have designed, developed and validated a decision tree workflow and showed the evolution of the interfaces through various stages of the real-life trials executed under European H2020 project GHOST.<\/jats:p>","DOI":"10.3390\/info13070340","type":"journal-article","created":{"date-parts":[[2022,7,15]],"date-time":"2022-07-15T00:17:10Z","timestamp":1657844230000},"page":"340","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Integrating Human Factors in the Visualisation of Usable Transparency for Dynamic Risk Assessment"],"prefix":"10.3390","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3214-8515","authenticated-orcid":false,"given":"Anastasija","family":"Collen","sequence":"first","affiliation":[{"name":"Centre Universitaire d\u2019Informatique, Geneva School of Economics and Management, University of Geneva, Route de Drize 7, CH-1227 Carouge, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ioan-Cosmin","family":"Szanto","sequence":"additional","affiliation":[{"name":"Kalos Information Systems, 540142 Targu Mures, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1124-4214","authenticated-orcid":false,"given":"Meriem","family":"Benyahya","sequence":"additional","affiliation":[{"name":"Centre Universitaire d\u2019Informatique, Geneva School of Economics and Management, University of Geneva, Route de Drize 7, CH-1227 Carouge, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1390-479X","authenticated-orcid":false,"given":"Bela","family":"Genge","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Information Technology, Faculty of Engineering and Information Technology, \u2018George Emil Palade\u2019 University of Medicine, Pharmacy, Science and Technology of T\u00e2rgu Mure\u015f, 540142 Targu Mures, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0172-6319","authenticated-orcid":false,"given":"Niels Alexander","family":"Nijdam","sequence":"additional","affiliation":[{"name":"Centre Universitaire d\u2019Informatique, Geneva School of Economics and Management, University of Geneva, Route de Drize 7, CH-1227 Carouge, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,7,14]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1145\/3419634","article-title":"A Survey on IoT Big Data","volume":"53","author":"Bansal","year":"2021","journal-title":"ACM Comput. Surv."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"3193","DOI":"10.1007\/s11276-018-1712-5","article-title":"A review on smart home present state and challenges: Linked to context-awareness internet of things (IoT)","volume":"25","author":"Almusaylim","year":"2019","journal-title":"Wirel. Netw."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Assal, H., and Chiasson, S. (2019, January 4\u20139). \u201cThink secure from the beginning\u201d: A survey with software developers. Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems, Glasgow, UK.","DOI":"10.1145\/3290605.3300519"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"719","DOI":"10.1016\/j.future.2015.09.003","article-title":"A risk analysis of a smart home automation system","volume":"56","author":"Jacobsson","year":"2016","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Collen, A., and Nijdam, N.A. (2022). Can I Sleep Safely in My Smarthome? A Novel Framework on Automating Dynamic Risk Assessment in IoT Environments. Electronics, 11.","DOI":"10.3390\/electronics11071123"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Haim, B., Menahem, E., Wolfsthal, Y., and Meenan, C. (2017, January 13\u201316). Visualizing insider threats: An effective interface for security analytics. Proceedings of the 22nd International Conference on Intelligent User Interfaces Companion, Limassol, Cyprus.","DOI":"10.1145\/3030024.3038264"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Realpe, P.C., Collazos, C.A., Hurtado, J., and Granollers, A. (2015, January 7\u20139). Towards an integration of usability and security for user authentication. Proceedings of the XVI International Conference on Human Computer Interaction, Vilanova i la Geltru, Spain.","DOI":"10.1145\/2829875.2829912"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1145\/2663341","article-title":"Privacy behaviors after Snowden","volume":"58","author":"Preibusch","year":"2015","journal-title":"Commun. ACM"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"656","DOI":"10.1016\/j.chb.2016.03.068","article-title":"Deciding between information security and usability: Developing value based objectives","volume":"61","author":"Dhillon","year":"2016","journal-title":"Comput. Hum. Behav."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1108\/ICS-01-2015-0001","article-title":"A study on usability and security features of the Android pattern lock screen","volume":"24","author":"Andriotis","year":"2016","journal-title":"Inf. Comput. Secur."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"134","DOI":"10.1109\/MCE.2017.2685019","article-title":"Security and Privacy Challenges in the Internet of Things [Security and Privacy Matters]","volume":"6","author":"Lee","year":"2017","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_12","unstructured":"Alur, R., Berger, E., Drobnis, A.W., Fix, L., Fu, K., Hager, G.D., Lopresti, D., Nahrstedt, K., Mynatt, E., and Patel, S. (2016). Systems Computing Challenges in the Internet of Things. arXiv."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Nurse, J.R., Atamli, A., and Martin, A. (2016, January 17\u201322). Towards a usable framework for modelling security and privacy risks in the smart home. Proceedings of the 4th International Conference on Human Aspects of Information Security, Privacy, and Trust, Toronto, ON, Canada.","DOI":"10.1007\/978-3-319-39381-0_23"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Dutta, S., Madnick, S., and Joyce, G. (2016, January 17\u201322). SecureUse: Balancing security and usability within system design. Proceedings of the 18th International Conference on Human-Computer Interaction, Toronto, ON, Canada. Communications in Computer and Information Science.","DOI":"10.1007\/978-3-319-40548-3_78"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Augusto-Gonzalez, J., Collen, A., Evangelatos, S., Anagnostopoulos, M., Spathoulas, G., Giannoutakis, K.M., Votis, K., Tzovaras, D., Genge, B., and Gelenbe, E. (2019, January 11\u201313). From Internet of Threats to Internet of Things: A Cyber Security Architecture for Smart Homes. Proceedings of the 2019 IEEE 24th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), Limassol, Cyprus.","DOI":"10.1109\/CAMAD.2019.8858493"},{"key":"ref_16","unstructured":"Gerber, N., Reinheimer, B., and Volkamer, M. (2018, January 12). Home Sweet Home? Investigating Users\u2019 Awareness of Smart Home Privacy Threats. Proceedings of an Interactive Workshop on the Human Aspects of Smarthome Security and Privacy (WSSP), Baltimore, MD, USA."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"267","DOI":"10.2478\/popets-2019-0047","article-title":"Investigating People\u2019s Privacy Risk Perception","volume":"2019","author":"Gerber","year":"2019","journal-title":"Proc. Priv. Enhancing Technol."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Duezguen, R., Mayer, P., Berens, B., Beckmann, C., Aldag, L., Mossano, M., Volkamer, M., and Strufe, T. (2021, January 20\u201322). How to Increase Smart Home Security and Privacy Risk Perception. Proceedings of the 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), Shenyang, China.","DOI":"10.1109\/TrustCom53373.2021.00138"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/MSP.2004.64","article-title":"Aligning security and usability","volume":"2","author":"Yee","year":"2004","journal-title":"IEEE Secur. Priv."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1109\/MSP.2016.95","article-title":"Barriers to Usable Security? Three Organizational Case Studies","volume":"14","author":"Caputo","year":"2016","journal-title":"IEEE Secur. Priv."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1109\/MSP.2004.71","article-title":"In search of usable security: Five lessons from the field","volume":"2","author":"Balfanz","year":"2004","journal-title":"IEEE Secur. Priv. Mag."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Khosrow-Pour, D.B.A. (2018). Usable Security. Encyclopedia of Information Science and Technology, IGI Global. [4th ed.]. Chapter 433.","DOI":"10.4018\/978-1-5225-2255-3"},{"key":"ref_23","unstructured":"Barbosa, N.M., Zhang, Z., and Wang, Y. (2020, January 7\u201311). Do Privacy and Security Matter to Everyone? Quantifying and Clustering User-Centric Considerations About Smart Home Device Adoption. Proceedings of the Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020), Online."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Emami-Naeini, P., Agarwal, Y., Faith Cranor, L., and Hibshi, H. (2020, January 18\u201321). Ask the experts: What should be on an IoT privacy and security label?. Proceedings of the 2020 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP40000.2020.00043"},{"key":"ref_25","unstructured":"Tabassum, M., Carolina, N., Kosinski, T., and Clara, S. (2019, January 11\u201313). \u201cI don\u2019 t own the data\u201d: End User Perceptions of Smart Home Device Data Practices and Risks. Proceedings of the Fifteenth USENIX Conference on Usable Privacy and Security, Santa Clara, CA, USA."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Bugeja, J., Jacobsson, A., and Davidsson, P. (2016, January 17\u201319). On Privacy and Security Challenges in Smart Connected Homes. Proceedings of the 2016 European Intelligence and Security Informatics Conference (EISIC), Uppsala, Sweden.","DOI":"10.1109\/EISIC.2016.044"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Vervier, P.A., and Shen, Y. (2018, January 10\u201312). Before toasters rise up: A view into the emerging IoT threat landscape. Proceedings of the 21st International Symposium on Research in Attacks, Intrusions, and Defenses, Heraklion, Greece.","DOI":"10.1007\/978-3-030-00470-5_26"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Haney, J.M., Furman, S.M., and Acar, Y. (2020, January 19\u201324). Smart home security and privacy mitigations: Consumer perceptions, practices, and challenges. Proceedings of the 2nd International Conference on Human-Computer Interaction, Copenhagen, Denmark.","DOI":"10.1007\/978-3-030-50309-3_26"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Dunphy, P., Vines, J., Coles-Kemp, L., Clarke, R., Vlachokyriakos, V., Wright, P., McCarthy, J., and Olivier, P. (2014, January 15\u201318). Understanding the Experience-Centeredness of Privacy and Security Technologies. Proceedings of the 2014 workshop on New Security Paradigms Workshop\u2014NSPW \u201914, Victoria, BC, Canada.","DOI":"10.1145\/2683467.2683475"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Boureanu, I., Druagan, C.C., Manulis, M., Giannetsos, T., Dadoyan, C., Gouvas, P., Hallman, R.A., Li, S., Chang, V., and Pallas, F. (2020, January 17\u201318). Creative Toolkits for TIPS. Proceedings of the ESORICS 2020: European Symposium on Research in Computer Security, Guildford, UK.","DOI":"10.1007\/978-3-030-66504-3"},{"key":"ref_31","unstructured":"Victora, S. (2020). IoT Guard: Usable Transparency and Control over Smart Home IoT Devices. [Ph.D. Thesis, Institut f\u00fcr Information Systems Engineering]."},{"key":"ref_32","unstructured":"Bada, M., Sasse, A.M., and Nurse, J.R.C. (2019). Cyber Security Awareness Campaigns: Why do they fail to change behaviour?. arXiv."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Chalhoub, G., Flechais, I., Nthala, N., Abu-Salma, R., and Tom, E. (2020, January 25\u201330). Factoring user experience into the security and privacy design of smart home devices: A case study. Proceedings of the CHI \u201920: CHI Conference on Human Factors in Computing Systems, Honolulu, HI, USA.","DOI":"10.1145\/3334480.3382850"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Feth, D., Maier, A., and Polst, S. (2017, January 9\u201314). A user-centered model for usable security and privacy. Proceedings of the 5th International Conference on Human Aspects of Information Security, Privacy, and Trust, Vancouver, BC, Canada.","DOI":"10.1007\/978-3-319-58460-7_6"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"583723","DOI":"10.3389\/fdata.2021.583723","article-title":"User, Usage and Usability: Redefining Human Centric Cyber Security","volume":"4","author":"Grobler","year":"2021","journal-title":"Front. Big Data"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"398","DOI":"10.1016\/j.cose.2018.07.011","article-title":"A taxonomy of cyber-physical threats and impact in the smart home","volume":"78","author":"Heartfield","year":"2018","journal-title":"Comput. Secur."},{"key":"ref_37","unstructured":"Li, Y., McCune, J., Baker, B., Newsome, J., Drewry, W., and Perrig, A. (2014, January 19\u201320). Minibox: A two-way sandbox for x86 native code. Proceedings of the 2014 USENIX Annual Technical Conference, USENIX ATC 2014, Philadelphia, PA, USA."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"577","DOI":"10.1080\/10447318.2018.1455307","article-title":"The System Usability Scale: Past, Present, and Future","volume":"34","author":"Lewis","year":"2018","journal-title":"Int. J. Hum.-Comput. Interact."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/13\/7\/340\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:50:14Z","timestamp":1760140214000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/13\/7\/340"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,14]]},"references-count":38,"journal-issue":{"issue":"7","published-online":{"date-parts":[[2022,7]]}},"alternative-id":["info13070340"],"URL":"https:\/\/doi.org\/10.3390\/info13070340","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,7,14]]}}}