Problem
Research questions and friction points this paper is trying to address.
IoT security
consumer devices
security advice
default passwords
software updates
"Am I Just That Dumb?": Applicability, Action and Verification in Consumer IoT Security Advice
🤖 AI Summary
研究通过实验探讨了消费者在IoT设备上应用安全建议的能力，揭示了用户难以根据通用建议确定适用性、执行操作及验证结果的问题。
📝 Abstract
Public campaigns urge people to change default passwords on Internet of Things (IoT) devices and keep them updated, assuming users can independently determine whether the advice applies. We gave 28 participants in the Netherlands two pieces of government-issued advice reflecting guidance in several countries and asked them to try to apply each to three of six consumer devices selected from bestseller lists, not confirmed feature availability (168 sessions). The protocol asked for each action to be demonstrated rather than completed. Of 84 password sessions, 33 reached no password setting, 50 an account-level setting, and one a device-level setting. Of 84 update sessions, 27 reached no update, 19 a companion-app update, and 38 a verified firmware update. No product had a manufacturer-set credential shared across units as described by the advice; the single device-level credential was unique to its unit. We contribute an account of what generic advice and the devices it addresses let users determine, act on, and verify.
Innovation
Methods, ideas, or system contributions that make the work stand out.
IoT Security
User Behavior
Security Advice
Password Management
Firmware Update
🔎 Similar Papers
No similar papers found.
