A quantitative behavioural online study examined a set of hazards that correspond with security-and privacy settings of the major global online social network (Facebook). These settings concern access to a user's account and access to the user's shared information (both security) as well as regulation of the user's information-sharing and user's regulation of others' information-sharing in relation to the user (both privacy). We measured 201 non-student UK users' perceptions of risk and other risk dimensions, and precautionary behaviour. First, perceptions of risk and dread were highest and precautionary behaviour was most common for hazards related to users' regulation of information-sharing. Other hazards were perceived as less risky and less precaution was taken against these, even though they can lead to breaches of users' security or privacy. Second, consistent with existing theory, significant predictors of perceived risk were attitude towards sharing information on Facebook, dread, voluntariness, catastrophic potential and Internet experience; and significant predictors of precautionary behaviour were perceived risk, control, voluntariness and Internet experience. Methodological implications emphasise the need for non-aggregated analysis and practical implications emphasise interventions to promote safe online social-network use.

A quantitative empirical online study examined a set of 16 security hazards on the Internet and two comparisons in 436 UK- and US students, measuring perceptions of risk and other risk dimensions. First, perceived risk was highest for identity theft, keylogger, cyber-bullying and social engineering. Second, consistent with existing theory, significant predictors of perceived risk were voluntariness, immediacy, catastrophic potential, dread, severity of consequences and control, as well as Internet experience and frequency of Internet use. Moreover, control was a significant predictor of precautionary behaviour. Methodological implications emphasise the need for non-aggregated analysis and practical implications emphasise risk communication to Internet users

This is a PDF file of an article that has undergone enhancements after acceptance, such as the addition of a cover page and metadata, and formatting for readability, but it is not yet the definitive version of record. This version will undergo additional copyediting, typesetting and review before it is published in its final form, but we are providing this version to give early visibility of the article. Please note that, during the production process, errors may be discovered which could affect the content, and all legal disclaimers that apply to the journal pertain.

This workshop contribution presents reflections on the collection and analysis of screen-capture video and audio recordings in two separate studies. Participants in both studies used a Web site individually in a laboratory setting under think-aloud instructions, while their online use and verbal behaviour was recorded using screen-capture software. One study used an online news site, the other a social-networking site as interactive artefact. The method of data collection, transcription of protocols, extraction of themes and the analysis of protocols are illustrated by comparing and contrasting the two studies. The use of the presented technique yielded valuable insights into user-reported aspects of user-experience with Web sites, and the findings of the studies were applied in further research to inform the selection of psychometric measures for modelling userexperience to guide system evaluation and design. Examples of results from the studies are provided to demonstrate the usefulness of the applied analysis techniques. Practical implications for collection, transcription and analysis of screen-capture video and audio data are discussed.

No abstract