Gathering evidence: use of visual security cues in web browsers

Abstract

Web browsers support secure online transactions, and provide visual feedback mechanisms to inform the user about security. These mechanisms have had little evaluation to determine how easily they are noticed and how effectively they are used. This paper describes a preliminary study conducted to determine which ele-ments are noted, which are ignored, and how easily they are found. We collected eyetracker data to study user’s attention to browser security, and gathered addi-tional subjective data through questionnaires. Our re-sults demonstrated that while the lock icon is com-monly viewed, its interactive capability is essentially ignored. We also found that certificate information is rarely used, and that people stop looking for security information after they have signed into a site. These initial results provide insights into how browser secu-rity cues might be improved. Key words: usable security, web browsing, visual feed-