Location
260-005, Owen G. Glenn Building
Start Date
12-15-2014
Description
Warning messages are one of the last lines of defense in information security, and are fundamental to users’ security interactions with technology. Unfortunately, research shows that users routinely ignore security warnings. A key contributor to this disregard is habituation, the diminishing of attention through frequent exposure. However, previous research has examined habituation indirectly by observing its influence on security behavior, rather than measuring habituation itself. We contribute by using functional magnetic resonance imaging (fMRI) to directly observe habituation as it occurs in the brain. Our results show that with repeated exposure to warnings, neural activity in the visual processing centers sharply decreases. We also show that this process occurs for images of both security warnings and general software applications, although habituation is more severe for security warnings. Our findings suggest that habituation is not due to users’ laziness or carelessness, but is a natural consequence of how the brain works.
Recommended Citation
Anderson, Bonnie; Vance, Anthony; Kirwan, Brock; Eargle, David; and Howard, Seth, "Users Aren’t (Necessarily) Lazy: Using NeuroIS to Explain Habituation to Security Warnings" (2014). ICIS 2014 Proceedings. 28.
https://aisel.aisnet.org/icis2014/proceedings/ISSecurity/28
Users Aren’t (Necessarily) Lazy: Using NeuroIS to Explain Habituation to Security Warnings
260-005, Owen G. Glenn Building
Warning messages are one of the last lines of defense in information security, and are fundamental to users’ security interactions with technology. Unfortunately, research shows that users routinely ignore security warnings. A key contributor to this disregard is habituation, the diminishing of attention through frequent exposure. However, previous research has examined habituation indirectly by observing its influence on security behavior, rather than measuring habituation itself. We contribute by using functional magnetic resonance imaging (fMRI) to directly observe habituation as it occurs in the brain. Our results show that with repeated exposure to warnings, neural activity in the visual processing centers sharply decreases. We also show that this process occurs for images of both security warnings and general software applications, although habituation is more severe for security warnings. Our findings suggest that habituation is not due to users’ laziness or carelessness, but is a natural consequence of how the brain works.