Search

Highlights • Phishing email subject lines contain high and diverse persuasive power in just a few words. • The paper builds on the well-known and foundational work of Cialdini's (2007), Gragg's (2003) and Stajano and Wilson (2011) to derive a unique list of Principles of Persuasion in social engineering, resulting from the application of the relational method by two independent researchers. • The study of the relations between existing persuasion principles was applied to the content analysis, by two independent researchers, of a random sample of phishing emails subject lines (N = 194), dated from 2008 to 2017. A thematic content analysis and a sample characterization in terms of visual elements and targeted content, revealed that the most prominent persuasion principles were 'Authority', 'Strong Affect', 'Integrity' and 'Reciprocation'. The persuasion principle 'Strong Affect' was the one containing the larger percentage of references with the presence of visual elements. The use of the pronoun 'you' and 'your' was more evident for the categories 'Strong Affect' and 'Authority', while the employment of the pronouns 'we, us, our' was more expressive in the 'Reciprocation' principle. • This paper presents a method on the way to define a tool for automated identification of principles of human persuasion in social engineering, within phishing emails. Future solutions should focus on the use of socio-technical aspects related mainly to a small number of persuasion principles ('Authority' and 'Distraction – Strong Affect'), which seem to be the most commonly used in phishing emails. Abstract Phishing is a very dangerous form of social engineering with the aim to deceive people into disclosing private/confidential information. Despite widespread warnings and means to educate users to identify phishing messages, these are still a prevalent practice and a lucrative business. The authors believe that persuasion, as a style of human communication designed to influence others, has a central role in successful digital scams. Research on persuasion applied to phishing emails is scarce and tends to build on Cialdini's work alone. Only a single study has proposed a list of merged principles from three different perspectives but it has methodological limitations regarding the analysis' performance by a single researcher and the testing of principles in a small, not validated sample of phishing emails. This paper aims to fill those gaps by building on Cialdini's, Gragg's and Stajano & Wilson's works to derive a unique list of Principles of Persuasion in Social Engineering (PPSE), resulting from the application of the relational method by two independent researchers. The PPSE are identified, by two independent researchers (Kappa > 0.789) on a sample of phishing email subject lines (N = 194), dated from 2008 to 2017 and randomly selected from a reliable phishing archive (millersmiles.co.uk). A thematic content analysis, together with the sample characterization in terms of visual elements and targeted content, revealed that the most prominent principles of persuasion in phishing emails were 'Authority', 'Strong Affect', 'Integrity' and 'Reciprocation'. The larger percentage of references with the presence of visual elements was found for the 'Strong Affect' principle. The use of the pronouns 'you' and 'your' was more evident for the categories 'Strong Affect' and 'Authority', while the employment of the pronouns 'we, us, our' was more frequent in the 'Reciprocation' principle. This paper constitutes a step further in understanding the use of principles of persuasion in phishing emails with future applications on how their recognition can be automated. [ABSTRACT FROM AUTHOR]

Abstract Internet mapping platforms are widely used in participatory planning. They carry the promise of accessibility, a wider audience, and more precise spatial data. However, they are critiqued for issues of trust, digital exclusion, and low usability. While the first two problems can be dependent on the local context, the last one is connected with the introduction of map editing tools. They change browser experience and require accessing spatial knowledge, which is a cognitively demanding task, especially for older people. This can negatively influence both quality and quantity of the data being produced. In this paper, we ask questions about the perception of online forms of participation, the accuracy and reliability of the data being collected in participatory mapping, differences between participants age groups, and design considerations for creating successful and inclusive participatory mapping tools? We conducted usability testing experiment with 30 participants. They were presented with various map editing tasks that were to be completed using a mock internet participatory mapping platform that was designed to mimic real-life applications. The sessions were recorded using eye-tracking equipment. We have observed a considerable enthusiasm for using and interacting with web mapping tools, but this was not reflected in the quality of the data which was very low overall. Known map features were added in wrong places even in simpler tasks. Although there were considerable differences between the oldest and youngest people in the map editing behavior, the quality and quantity of the data were similar. We conclude that mapping platforms can be useful for participatory planning and age of the participants is not a barrier for their inclusion when the interface is properly designed. But in the same time care is needed to provide robust quality control. We also propose a research agenda composed from three avenues of research: data quality, usability and user experience and utility of the map. Highlights • Using web map was a difficult task for experiment participants, regardless of age. • Accuracy of the data produced by participants was very low. • Participants had a positive attitude toward online participation in urban planning. • PPGIS research agenda is proposed: data quality, usability and utility of the map. [ABSTRACT FROM AUTHOR]

Spatial information acquisition happens in large part through the visual sense. Studying visual attention and its connection to cognitive processes has been the interest of many research efforts in spatial cognition over the years. Recent technological developments have led to an increasing popularity of eye-tracking methodology for investigating research questions related to spatial cognition, geographic information science (GIScience) and cartography. At the same time, eye trackers can nowadays be used as an input device for (cognitively engineered) user interfaces to geographic information. We provide an overview of the most recent literature advancing and utilizing eye-tracking methodology in these fields, introduce the research articles in this Special Issue, and discuss challenges and opportunities for future research. [ABSTRACT FROM AUTHOR]

Many applications require knowledge about how to deceive, including those related to safety, security, and warfare. Speech and text analysis can help detect deception, as can cameras, microphones, physiological sensors, and intelligent software. Models of deception and noncooperation can make a virtual or mixed-reality training environment more realistic, improve immersion, and thus make it more suitable for training military or security personnel. Robots might need to operate in physical and nontraining environments where they must perform military activity, including misleading the enemy. The contributions to this installment of Trends & Controversies present state-of-the-art research approaches to the analysis and generation of noncooperative and deceptive behavior in virtual humans, agents, and robots; the analysis of multiparty interaction in the context of deceptive behavior; and methods to detect misleading information in texts and computer-mediated communication. Articles include: "Computational Deception and Noncooperation," by Anton Nijholt; "Robots that Need to Mislead: Biologically-Inspired Machine Deception," by Ronald C. Arkin; "Deception in Sports Using Immersive Environments," by Sébastien Brault, Richard Kulpa, Franck Multon, and Benoit Bideau; "Non-Cooperative and Deceptive Virtual Agents," by David Traum; "Deception Detection in Multiparty Contexts,"by Hayley Hung; "Deception Detection, Human Reasoning, and Deception Intent," by Eugene Santos Jr., Deqing Li, and Fei Yu; and "Automatic Deception Detection in Computer-Mediated Communication," by Lina Zhou and Dongsong Zhang. [ABSTRACT FROM AUTHOR]

Background: Eye Gaze Tracking Systems (EGTSs) estimate the Point Of Gaze (POG) of a user. In diagnostic applications EGTSs are used to study oculomotor characteristics and abnormalities, whereas in interactive applications EGTSs are proposed as input devices for human computer interfaces (HCI), e.g. to move a cursor on the screen when mouse control is not possible, such as in the case of assistive devices for people suffering from locked-in syndrome. If the user's head remains still and the cornea rotates around its fixed centre, the pupil follows the eye in the images captured from one or more cameras, whereas the outer corneal reflection generated by an IR light source, i.e. glint, can be assumed as a fixed reference point. According to the so-called pupil centre corneal reflection method (PCCR), the POG can be thus estimated from the pupil-glint vector. Methods: A new model-independent EGTS based on the PCCR is proposed. The mapping function based on artificial neural networks allows to avoid any specific model assumption and approximation either for the user's eye physiology or for the system initial setup admitting a free geometry positioning for the user and the system components. The robustness of the proposed EGTS is proven by assessing its accuracy when tested on real data coming from: i) different healthy users; ii) different geometric settings of the camera and the light sources; iii) different protocols based on the observation of points on a calibration grid and halfway points of a test grid. Results: The achieved accuracy is approximately 0.49°, 0.41°, and 0.62° for respectively the horizontal, vertical and radial error of the POG. Conclusions: The results prove the validity of the proposed approach as the proposed system performs better than EGTSs designed for HCI which, even if equipped with superior hardware, show accuracy values in the range 0.6°-1°. [ABSTRACT FROM AUTHOR]

The human face provides useful information during interaction; therefore, any system integrating Vision-Based Human Computer Interaction requires fast and reliable face and facial feature detection. Different approaches have focused on this ability but only open source implementations have been extensively used by researchers. A good example is the Viola-Jones object detection framework that particularly in the context of facial processing has been frequently used. The OpenCV community shares a collection of public domain classifiers for the face detection scenario. However, these classifiers have been trained in different conditions and with different data but rarely tested on the same datasets. In this paper, we try to fill that gap by analyzing the individual performance of all those public classifiers presenting their pros and cons with the aim of defining a baseline for other approaches. Solid comparisons will also help researchers to choose a specific classifier for their particular scenario. The experimental setup also describes some heuristics to increase the facial feature detection rate while reducing the face false detection rate. [ABSTRACT FROM AUTHOR]

Abstract: Generation Y (age 18–31) is a very large and economically powerful generation, containing eighty-two million people and spending $200 billion annually. It is not surprising that companies are interested in gaining the patronage of this group, particularly via the web. Surprisingly, very little research into making web pages appealing to this important demographic has been done. This paper addresses this need through two separate studies. The first, an online survey, provides evidence that our proposed score for predicting the visual appeal of web pages reflects the self report measure of what pages Generation Y likes. To refine these findings, an eye tracking study is conducted using the pages that were most and least liked in Study I. Participants’ eye movement is tracked while browsing these pages, providing evidence of what attracts their attention. The results of these two studies suggest that Generation Y may prefer pages that include a main large image, images of celebrities, little text, and a search feature. This research has important implications. [Copyright &y& Elsevier]

The proliferation of digital information resources in recent years challenges consumers with the need to employ critical thinking skills in reading news. This paper suggests an updated perspective to the expression that “the medium is the message” by comparing the ability of high-school and college students to exercise critical thinking skills in reading news in print and digital formats. The most important finding is the better performance of the younger participants (high school students) in reading digital news formats, and the better performance of the college students when reading news in a print format. The findings of this exploratory study are discussed through the lenses of three perspectives: a usability perspective, a cognitive perspective and an information economics perspective in order to stimulate further research that may provide designers, researchers and educators with useful guidelines for designing effective messages in the information age. [ABSTRACT FROM AUTHOR]

Abstract: With an increasing number of technologies supporting transactions over distance and replacing traditional forms of interaction, designing for trust in mediated interactions has become a key concern for researchers in human computer interaction (HCI). While much of this research focuses on increasing users’ trust, we present a framework that shifts the perspective towards factors that support trustworthy behavior. In a second step, we analyze how the presence of these factors can be signalled. We argue that it is essential to take a systemic perspective for enabling well-placed trust and trustworthy behavior in the long term. For our analysis we draw on relevant research from sociology, economics, and psychology, as well as HCI. We identify contextual properties (motivation based on temporal, social, and institutional embeddedness) and the actor''s intrinsic properties (ability, and motivation based on internalized norms and benevolence) that form the basis of trustworthy behavior. Our analysis provides a frame of reference for the design of studies on trust in technology-mediated interactions, as well as a guide for identifying trust requirements in design processes. We demonstrate the application of the framework in three scenarios: call centre interactions, B2C e-commerce, and voice-enabled on-line gaming. [Copyright &y& Elsevier]

The research by Scheirer et al. (2002) is pivotal in promoting the use of psychophysiological measures in HCI. We argue that rather than inferring users'' emotional states from the data, which is difficult to do reliably, the signals can be used as an indicator of user cost by monitoring changes in users'' physiological responses. We applied this approach by monitoring Skin Conductance, Heart Rate and Blood Volume Pulse (as well as task performance and user satisfaction) to investigate the impact of media quality degradations on users. Five studies were conducted utilising this approach. Results show that psychophysiological data show responses to audio and video degradations: users respond to specific degradations with increased levels of arousal. In addition, psychophysiological responses do not always correlate with each other and subjective and physiological measures do not always concur, which means that psychophysiological data may detect responses that users are either not aware of or cannot recall at post-session subjective assessment. We thus conclude that psychophysiological measures have a valuable role to play in media quality evaluation. [Copyright &y& Elsevier]