User Acceptance of Password Manager Software: Evidence from Australian Microbusinesses
محتوى المقال
الملخص
While text passwords are still a pervasive authentication tool, their inadequacies are well recognized. Poorly chosen and weak passwords are the main reason behind security breaches. Multiple authentication techniques such as biometric, token-based, and knowledge-based authentication have been developed to overcome data leaks. However, acceptance of these authenticating techniques is complicated, and users find them hard to use. Microbusinesses, defined as having less than two employees, usually have very limited resources including budget, information security expertise and updated computer systems to fulfil the security requirements. Many microbusiness owners use the same information technology as in the home but for more sophisticated commercial reasons. An effective and easy way for microbusinesses to add an extra protection layer to their systems and passwords is through the use of password managers. This paper examines the useability and ease of use of the password manager software. We extended the Technology Acceptance Model (TAM) and tested the mediating role of self-efficacy on TAM's relationship with computer security usage. A sample of 420 microbusiness owners was taken to test the relationships among the variables through an online web-based survey. The results confirmed that self-efficacy plays a vital role in the user acceptance of password managers and reported its mediating role between perceived ease of use, perceived usefulness, and computer security usage.
الكلمات المفتاحية
Computer security usage، password manager software، Technology acceptance model، Self-efficacy
التنزيلات
المراجع
Australian Cyber Security Centre, “ACSC Threat Report 2015,” July 15, 2015. [Online]. Available: https://www.cyber.gov.au/acsc/view-all-content/reports-and-statistics/acsc-threat-report-2015
S. Morgan, “Cybercrime To Cost The World $10.5 Trillion Annually By 2025,” Nov. 13, 2020. Accessed: Dec. 11, 2021. [Online]. Available: https://cybersecurityventures.com/cybercrime-damages-6-trillion-by-2021/
T. Bui, and T. Aura, “GPASS: A password manager with group-based access control,” in Nordic Conference on Secure IT Systems (NordSec 2017), in Secure IT Systems, H. Lipmaa, A. Mitrokotsa, and R. Matulevicius, Eds., in Lecture Notes in Computer Science, vol. 10674, 2017.
K. Yeh, C. Su, W. Chiu and L. Zhou, "I Walk, Therefore I Am: Continuous User Authentication with Plantar Biometrics," IEEE Commun. Mag., vol. 56, no. 2, pp. 150-157, Feb. 2018, doi: 10.1109/MCOM.2018.1700339.
S. R. Boss, L. J. Kirsch, R. A. Shingler, and R. W. Boss, “If someone is watching, I'll do what I'm asked: mandatoriness, control, and information security,” Eur. J. Inf. Syst., vol. 18, p. 151-164, 2009, doi: 10.1057/ejis.2009.8.
M. Whitty, J. Doodson, S. Creese, and D. Hodges, “Individual differences in cyber security behaviors: An examination of who is sharing passwords,” CyberPsychol. Behav. Soc. Netw., vol. 18, no. 1, p. 3-7, Jan. 1, 2015, doi: 10.1089/cyber.2014.0179.
P. Engle, “Cybersecurity basics,” Ind. Eng., vol. 48, no. 1, Jan. 2016.
V. Zimmermann and N. Gerber. “"If it wasn't secure, they would not use it in the movies"–security perceptions and user acceptance of authentication technologie,” in Int. Conf. Hum. Asp. Inf. Secur. Priv. Trust, in Human Aspects of Information Security, Privacy and Trust, T. Tryfonas Ed., in Lecture Notes in Computer Science, vol 10292, 2017, doi: 10.1007/978-3-319-58460-7_18.
J. Bonneau, C. Herley, P. C. Van Oorschot, and F. Stajano, “Passwords and the evolution of imperfect authentication,” Commun. ACM, vol. 58, no. 7, p. 78-87, July 2015, doi: 10.1145/2699390.
R. R. Heckle, A. S. Patrick, and A. Ozok, “Perception and acceptance of fingerprint biometric technology,” in Proc. 3rd Symp. Usable Priv. Secur., Pittsburgh, PA, USA, July 18, 2007, p. 153-154, doi: 10.1145/1280680.1280704.
P. C. Lai, “Design and Security impact on consumers' intention to use single platform E-payment,” Interdiscip. Inf. Sci., vol. 22, no. 1, p. 111-122, 2016, doi: 10.4036/iis.2016.R.05.
P. C. Lai, “Security as an extension to TAM model: Consumers' intention to use a single platform e-payment,” Asia-Pac. J. Manag. Res. Innov., vol. 13, no. 3-4, p. 110-119, Sept. 2017, doi: 10.1177/2319510X18776405.
P. Luarn and H.-H. Lin, “Toward an understanding of the behavioral intention to use mobile banking,” Comput. Hum. Behav., vol. 21, no. 6, p. 873-891, Nov. 2005, doi: 10.1016/j.chb.2004.03.003.
X. Zhang, X. Han, Y. Dang, F. Meng, X. Guo, and J. Lin, “User acceptance of mobile health services from users' perspectives: The role of self-efficacy and response-efficacy in technology acceptance,” Inform. Health Soc. Care, vol. 42, no. 2, p. 194-206, Aug. 26, 2016, doi: 10.1080/17538157.2016.1200053.
Y. He, Q. Chen, and S. Kitkuakul, “Regulatory focus and technology acceptance: Perceived ease of use and usefulness as efficacy,” Cogent Bus. Manag., vol. 5, no. 1, p. 1-22, Apr. 2018, doi: 10.1080/23311975.2018.1459006.
V. Venkatesh, M. G. Morris, G. B. Davis, and F. D. Davis, “User acceptance of information technology: Toward a unified view,” MIS Q., vol. 27, no. 3, p. 425-478, Sept. 2003, doi: 10.2307/30036540.
Y.-M. Cheng, “Antecedents and consequences of e-learning acceptance,” Inf. Syst. J., vol. 21, no. 3, p. 269-299, Aug. 16, 2010, doi: 10.1111/j.1365-2575.2010.00356.x.
F. Weng, R. JouYang, H. Ho and H. Su, "A Study of Elementary School Teachers' Intention to Use Multimedia Materials Based on the Technology Acceptance Model-A Case Study of Elementary Schools in Chiayi County," in 2017 Int. Conf. Inf. Commun. Eng. (ICICE), Xiamen, China, 2017, pp. 98-100, doi: 10.1109/ICICE.2017.8478890.
L. G. Wallace and S. D. Sheetz, “The adoption of software measures: A technology acceptance model (TAM) perspective,” Inf. Manag., vol. 51, no. 2, p. 249-259, Mar. 2014, doi: 10.1016/j.im.2013.12.003.
P. B. Lowry, T. Dinev, and R. Willison, “Why security and privacy research lies at the centre of the information systems (IS) artefact: Proposing a bold research agenda,” Eur. J. Inf. Syst., vol. 26, no. 6, p. 546-563, Feb. 15, 2018, doi: 10.1057/s41303-017-0066-x.
K. Witte, “Fear as motivator, fear as inhibitor: Using the extended parallel process model to explain fear appeal successes and failures,” in Handbook of Communication and Emotion, P.A. Andersen and L.K. Guerrero, Eds., San Diego, CA, USA: Academic Press, 1996, p. 423-450.
F. D. Davis, “Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology,” MIS Q., vol. 13, no. 3, p. 319-340, 1989, doi: 10.2307/249008.
J. Schepers and M. Wetzels, “A meta-analysis of the technology acceptance model: Investigating subjective norm and moderation effects,” Inf. Manag., vol. 44, no. 1, p. 90-103, Jan. 2007, doi: 10.1016/j.im.2006.10.007.
T. Herath, R. Chen, J. Wang, K. Banjara, J. Wilbur, and H. R. Rao, “Security services as coping mechanisms: an investigation into user intention to adopt an email authentication service,” Inf. Syst. J., vol. 24, no. 1, p. 61-84, July 27, 2012, doi: 10.1111/j.1365-2575.2012.00420.x.
P. Piccolotto and P. Maller, “Biometrics from the user point of view; Deriving design principlese from user perceptions and concerns about biometeric systems,” Intel Technol. J., vol. 18, no. 4, p. 30-44, 2014.
S. Dey, S. Sampalli, and Q. YE, “Security and privacy issues in mobile cloud computing,” Int. J. Bus. Cyber Secur., vol. 1, no. 1, p. 31-43, July 2016.
E. Karahanna, R. Agarwal, and C. M. Angst, “Reconceptualising compatibility beliefs in technology acceptance research,” MIS Q., vol. 30, no. 4, p. 781-804, 2006, doi: 10.2307/25148754.
V. Assadi and K. Hassanein, “Continuance intention to use high maintenance information systems: The role of perceived maintenance effort,” in Proc. Eur. Conf. Inf. Syst. (ECIS 2010), Pretoria, South Africa, 2010, p. 94.
J. Shropshire, M. Warkentin, and S. Sharma, “Personality, attitudes, and intentions: Predicting initial adoption of information security behavior,” Comput. Secur., vol. 49, p. 177-191, Mar. 2015, doi; 10.1016/j.cose.2015.01.002.
R. Hirschheim, “Introduction to the special issue on" quo vadis TAM-issues and reflections on technology acceptance research",” J. Assoc. Inf. Syst., vol. 8, no. 4, p. 9, 2007, doi: 10.17705/1jais.00128.
Benbasat and W. Wang, “Trust in and adoption of online recommendation agents,” J. Assoc. Inf. Syst., vol. 6, no. 3, p. 4, 2005, doi: 10.17705/1jais.00065.
E. K. Maloney, M. K. Lapinski, and K. Witte, “Fear appeals and persuasion: A review and update of the extended parallel process model,” Soc. Personal. Psychol. Compass, vol. 5, no. 4, p. 206-219, Apr. 3, 2011, doi: 10.1111/j.1751-9004.2011.00341.x.
K. Maennel, R. Ottis, and O. Maennel. “Improving and measuring learning effectiveness at cyber defense exercises,” in Nordic Conference on Secure IT Systems, in Secure IT Systems, H. Limpaa, A. Mitrokotsa, and R. Matulevicius, Eds., in Lecture Notes on Computer Science, vol. 10674, 2017, pp. 123-138.
G. L. Polites and E. Karahanna, “Shackled to the Status Quo: The Inhibiting Effects of Incumbent System Habit, Switching Costs, and Inertia on New System Acceptance,” MIS Q., vol. 36, no. 1, p. 21-42, Mar. 2012, doi: 10.2307/41410404.
P. M. Pavlou and M. Fygenson, “Understanding and predicting electronic commerce adoption: An extension of the theory of planned behavior,” MIS Q., vol. 30, no. 1, p. 115-143, Mar. 2006, doi: 10.2307/25148720.
C. L. Chet and J. Johnson, “Analysing home PC security adoption behavior,” J. Comput. Inf. Syst., vol. 52, no. 4, p. 20-29, 2012, doi: 10.1080/08874417.2012.11645573.
C. Johnston, M. Warkentin, and M. Siponen, “An enhanced fear appeal rehtorical framework: Leveraging threats to human asset through sanctioning rhetoric,” MIS Q., vol. 39, no. 1, p. 113-134, 2015, doi: 10.25300/MISQ/2015/39.1.06.
Fornell and D.F. Larcker, “Evaluating structural equation models with unobservable variables and measurement error,” J. Mark. Res., vol. 18, no. 1, p. 39-50, 1981, doi: 10.1177/002224378101800104.
E. Stobert, T. Safaie, H. Molyneaux, M. Mannan, and A. Youssed, “ByPass: Reconsidering the usability of password managers,” in Int. Conf. Secur. Priv. Commun. Syst., in Security and Privacy in Communication Networks, N. Park, K. Sun, S. Foresti, K. Butler, and N. Saxena, Eds., in Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol. 335, 2020, pp. 446-466.
M. Fagan, Y. Albayram, M. M. Khan, and R. Buck, “An investigation into users' considerations towards using password managers,” Hum.-Centric Comput. Inf. Sci., vol. 7, no. 1, p. 1-20, 2017, doi: 10.1186/s13673-017-0093-6.
F. Alodhyani, G. Theodorakopoulos, and P. Reinecke, “Password managers—It's all about trust and transparency,” Future Internet, vol. 12, no. 11, p. 189, doi: 10.3390/fi12110189.
S. Pearman, S. A. Zhang, L. Bauer, N. Christin, and L. F. Cranor, “Why people (don’t) use password managers effectively,” in Fifteenth Symp. Usable Priv. Secur., Santa Clara, CA, USA, Aug. 12-13, 2019, pp. 319-338.
M. Hock-Doepgen, T. Clauss, S. Kraus, and C.-F. Cheng, “Knowledge management capabilities and organizational risk-taking for business model innovation in SMEs,” J. Bus. Res., vol. 130, pp. 683-697, June 2021, doi: 10.1016/j.jbusres.2019.12.001.
R. Luna, “Stranger Danger!: How Hackers Break into School Databases to Steal Student Data, and What Legislatures Should Do about It,” SSRN Electr. J., Feb. 7, 2021, doi: 10.2139/ssrn.3781055.
S. A. Kamal, M. Shafiq, and P. Kakria, “Investigating acceptance of telemedicine services through an extended technology acceptance model (TAM),” Technol. Soc., vol. 60, Feb. 2020, doi: 10.1016/j.techsoc.2019.101212
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.