Evaluating VPN Users' Trust Among Information Technology Professionals and Nonprofessionals in Lagos, Nigeria
محتوى المقال
الملخص
This paper investigates the factors that lead to trust in Virtual Private Networks (VPNs) among the IT professionals and non-professional users in Lagos, Nigeria, regarding the perception of security, privacy, and usability. Using the Technology Acceptance Model (TAM), the study uses an exploratory qualitative design and an interpretivist paradigm to examine how users build trust in VPN technologies. The interviews were semi-structured and included 30 participants (10 professionals and 20 non-professionals), with data being analysed thematically. The results have identified four foundational determinants of VPN trust: technical configuration and encryption protocol, provider reputation and reliability, trust gap between paid and free VPNs and user education and awareness. IT professionals were highly technical savvy and placed trust in the strength of encryption, the configuration of protocols and industry standards. Non-professionals on the other hand evaluated trust with mainly experiential signals like brand familiarity, peer referrals, and perceived anonymity. Both sampled indicated higher confidence with paid VPNs because of better security guarantees and the mitigation of data exploitation. The paper identifies a continued knowledge gap that breeds misinformation about VPN functionality that adds to disconnect between perceived and actual security. It suggests enabling better regulation, transparency among the providers, and multi-level user education measures to enhance informed adoption of VPN. The paper ends by giving limitations of the study in terms of self-reported figures and those based on experience.
الكلمات المفتاحية
Information security، Virtual private network (VPN)، Security posture، Remote work، Data encryption
التنزيلات
المراجع
C. Leberknight, J. Tsai, and Y. Wang, “VPNs and user privacy: A comprehensive analysis,” Privacy and Security Journal, 8(4), 200–215, 2021.
W. Alasmary, F. Alhaidari, and M. Alshaikh, “Security implications of large-scale VPN deployments in enterprise environments,” IEEE Access, 10, 114567–114580. https://doi.org/10.1109/ACCESS, 2022.
A. Rosic, D. Novak, and M. Petrovic, “Enhancing VPN protocols for improved cybersecurity,” Journal of Network Security, 12(1), 33–47, 2021.
X. Liu, Y. Li, and J. Yu, “DNS hijacking in VPN environments: Detection and prevention approaches,” IEEE Transactions on Dependable and Secure Computing, 19(2), 905–920, 2022.
S. M, U. Haq, “Analysis of VPN vulnerabilities and insider threats in remote-work infrastructure,” International Journal of Research in Interdisciplinary Studies, 3(2), 112–128, 2025.
M. T. Khan, J. DeBlasio, and G. M. Voelker, “An empirical analysis of the commercial VPN ecosystem,” IEEE Security & Privacy, 20(2), 38–46, 2022.
S. Ramamurthy and R. Bhargavi, “User misconceptions about VPN privacy: An empirical analysis of browser fingerprinting and tracking vulnerabilities,” Journal of Computer Security, 31(3), 375–392, 2023.
F. D. Davis, “Perceived usefulness, perceived ease of use, and user acceptance of information technology,” MIS Quarterly, 13(3), 319–340, 1989.
R. P. Bagozzi, “The legacy of the technology acceptance model and a proposal for a paradigm shift,” Journal of the Association for Information Systems, 8(4), 244–254, 2007.
Y. Lee, K. A. Kozar, and K. R. Larsen, “The technology acceptance model: Past, present, and future,” Communications of the Association for Information Systems, 12(1), 752–780, 2022.
J. Ren, D. Lindskog, and L. Cheng, “Security weaknesses in VPN protocols: A comprehensive review,” IEEE Communications Surveys & Tutorials, 23(1), 342–375, 2021.
J. Baek, S. Lee, and J. Park, “VPN client security assessment: Analysis of configuration vulnerabilities,” Security and Communication Networks, Article 2478564, 2023.
K. Qollakaj, “A study on the VPN security landscape post Covid-19,” Array, 27, Article 100437. https://doi.org/10.1016/j.array.2025.100437, 2025.
Nigeria Data Protection Act, 2023, “Federal Republic of Nigeria,” https://placng.org/i/wp-content/uploads/2023/06/Nigeria-Data-Protection-Act-2023.pdf, 2023.
S. Ramesh, T. Vyas, and R. Ensafi, “All of them claim to be the best”: Multi-perspective study of VPN users and VPN providers” arXiv. https://arxiv.org/abs/2208.03505, 2023.
A. Dutkowska-Żuk, M. Tahaei, K. Renaud, and R. Dey, “How and why people use virtual private networks,” In 31st USENIX Security Symposium. USENIX Association. https://www.usenix.org/system/files/sec22-dutkowska-zuk.pdf, 2022.
M. Ikram, N. Vallina-Rodriguez, and G. Tyson, “Identifying DNS and traffic leakage vulnerabilities in commercial VPN services,” IEEE Transactions on Dependable and Secure Computing, 19(5), 3073–3088, 2022.
S. Aggarwal, V. Kumar, and K. Sunil, “Consumer behaviour patterns in VPN adoption decisions,” Journal of Information Security and Applications, 74, Article 103387, 2023.
J. W. Creswell and C. N. Poth, “Qualitative inquiry & research design: Choosing among five approaches (4th ed.),” SAGE, 2018.
G. Guest, A. Bunce, and L. Johnson, “How many interviews are enough? An experiment with data saturation and variability,” Field Methods, 18(1), 59–82. https://doi.org/10.1177/1525822X05279903, 2006.
M. J. Awan, A. Yasin, and S, Ahmed, “Evaluating user comprehension of VPN provider no-logs claims,” Journal of Cybersecurity, 9(1), Article tyad010, 2023.
C. Zhang, Z. Cai, W. Chen. X, Luo, and J. Yin, “Flow burst: Exploitation of a VPN flow control vulnerability,” In 29th USENIX Security Symposium (pp. 1–16), 2021.
S. Nanda and R. C. Panigrahi, “Malware prevalence in free VPN applications: A security analysis,” IEEE Access, 11, 53817–53834, 2023.
A. Malik, M. A Shah, and Z. Malik, “Analysis of IPv6 traffic leakage in free VPN services,” Journal of Network and Computer Applications, 213, Article 103569, 2023.
Y. S. Lincoln and E. G. Guba, “Naturalistic inquiry,” SAGE, 1985.
N. A. A. Rahman, I. H. Sairi, N. A. M. Zizi, and F. Khalid, “The importance of cybersecurity education in school,” International Journal of Information and Education Technology, 10(5), 378–382, 2021.
Organisation for Economic Co-operation and Development, “Embedding values and attitudes in curriculum,” OECD Publishing, 2021.
P. M. Podsakoff, S. B. MacKenzie, and N. P. Podsakoff, “Sources of method bias in social science research and recommendations on how to control it,” Annual Review of Psychology, 63, 539–569. https://doi.org/10.1146/annurev-psych-120710-100452, 2012.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.