If This Context Then That Concern: Exploring users’ concerns with IFTTT applets

End users are increasingly using trigger-action platforms like If-This-Then-That (IFTTT) to create applets to connect smart-home devices and services. However, there are inherent implicit risks in using such applets—even non-malicious ones—as sensitive information may leak through their use in certa...

Full description

Saved in:
Bibliographic Details
Main Authors: Saeidi Mahsa, Calvert McKenzie, Au Audrey W., Sarma Anita, Bobba Rakesh B.
Format: article
Language:EN
Published: Sciendo 2022
Subjects:
iot
Online Access:https://doaj.org/article/8582243ede0e4d77896aaa302dd95a05
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:End users are increasingly using trigger-action platforms like If-This-Then-That (IFTTT) to create applets to connect smart-home devices and services. However, there are inherent implicit risks in using such applets—even non-malicious ones—as sensitive information may leak through their use in certain contexts (e.g., where the device is located, who can observe the resultant action). This work aims to understand to what extent end users can assess this implicit risk. More importantly we explore whether usage context makes a difference in end-users’ perception of such risks. Our work complements prior work that has identified the impact of usage context on expert evaluation of risks in IFTTT by focusing the impact of usage context on end-users’ risk perception. Through a Mechanical Turk survey of 386 participants on 49 smart-home IFTTT applets, we found that participants have a nuanced view of contextual factors and that different values for contextual factors impact end-users’ risk perception differently. Further, our findings show that nudging the participants to think about different usage contexts led them to think deeper about the associated risks and raise their concern scores.