EuroUSEC

European Symposium on Usable Security

[EuroUSEC @EuroUsec]

📢 Thank you to everyone who attended #EuroUSEC2025 🥳

Your presence and engagement helped make this event a real success!

We hope you left as inspired as we are to continue exploring the human and usability dimensions of security and privacy 🔐

@UniStrathclyde @uni_lu

[EuroUSEC @EuroUsec]

👀For more details, check out our amazing programme: https://t.co/X19M3zOYCk
@UniStrathclyde @uni_lu

[EuroUSEC @EuroUsec]

📢Another piece of work will be presented tomorrow at #EuroUSEC2025.

“Between Privacy and Transparency: Communicating Credibility Assessments on Encrypted Platforms”

by Huiyun Tang, Björn Rohles, Yuwei CHUAI, Gabriele Lenzini and Anastasia Sergeeva

[EuroUSEC @EuroUsec]

In a preregistered 2×2 online experiment (N=537), the study found that both content- and context-based cues improved decision-making. Communicating system certainty further helped users calibrate trust.

[EuroUSEC @EuroUsec]

👀For more details on our amazing programme: https://t.co/X19M3zOYCk
@UniStrathclyde @uni_lu

[EuroUSEC @EuroUsec]

👀 Another exciting work will be presented at #EuroUSEC2025

“When Trust Overrides Caution: Investigating Spear Phishing in Personal Contexts Among Young and Older Adults”

Rhian Lukins, Neeranjan Chitare, Nalin Arachchilage, Lynne Coventry, James Nicholson

[EuroUSEC @EuroUsec]

Are Passkeys the Key: Older adults preferred passkeys for usability but cited adoption concerns. Despite positive attitudes, they’d only use passkeys for important accounts due to hardware requirements and setup hassles. A missed opportunity given their poor password practices.

[EuroUSEC @EuroUsec]

This SoK paper reviews 90+ studies to assess how AI tools support SOC analyst CSA across decision-making modes, incident types, and CSA levels. It finds strong research emphasis on automation and perception, with major gaps in augmentation and collaborative exploration.

[EuroUSEC @EuroUsec]

We hope everyone is as excited as we are for #EuroUSEC2025 later this week!
We'll hear about amazing work like:
"SoK: AI Support for Analyst Situation Awareness in Security Operation Centres"

Navodika Karunasingha, Mohan Baruwal Chhetri, Surya Nepal, Cecile Paris, Salil Kanhere

[EuroUSEC @EuroUsec]

👀For more details on our amazing programme: https://t.co/jXMLxJWomw
@UniStrathclyde @uni_lu

[EuroUSEC @EuroUsec]

📢 Another fantastic piece of work we'll hear all about at #EuroUSEC2025:

"SOK: Cognitive Dissonance Theory in the Cybersecurity Domain"
by:
Karen Renaud, Paul van Schaik

[EuroUSEC @EuroUsec]

The widespread activation of cognitive dissonance triggers rejection of cybersecurity advice that does not align with current practice. Understanding how and why can help us to alleviate such cognitive dissonance and thereby encourage adoption of secure behaviours.

[EuroUSEC @EuroUsec]

This paper explore how employees experience cybersecurity in daily work. Through 20 interviews, they identified key points of contact and mapped them to the NIST-CSF. Their findings expose gaps highlighting the need for an Employee-Centric Framework of Cybersecurity.

[EuroUSEC @EuroUsec]

👂We're excited to hear more about this study as part of our 'Organizational Cybersecurity Practices' Session at #EuroUSEC2025:

"Towards an Employee-Centric Framework of Cybersecurity"
by:
Alexandra von Preuschen, Roman Henke, Manpreet Kaur, Julian Nickel, Monika Schuhmacher

[EuroUSEC @EuroUsec]

@UniStrathclyde @uni_lu

[EuroUSEC @EuroUsec]

📢 More exciting work to look forward to next week at #EuroUSEC2025 👀

"Measuring and Benchmarking Incident Response Readiness"
Written by:
Montii A. and Dr. Priyadarsi Nanda

[EuroUSEC @EuroUsec]

This paper introduces the Incident Response Readiness Score (IRRS), a risk-weighted, scenario-based framework for organisations. IRRS provides structured simulations, maturity mapping, and comparative benchmarks to measure and strengthen cyber incident response capabilities.

[EuroUSEC @EuroUsec]

This study provides empirical evidence to guide policy choices for IoT cybersecurity label programs. The authors find that the presence of IoT labels alleviates security and privacy concerns! They provide recommendations for future programs and discuss potential societal impacts.

[EuroUSEC @EuroUsec]

📢Highlighting another fantastic paper to be presented at #EuroUSEC2025:
"IoT labels’ impact on security and privacy concerns"
Written by:
@yschiangg, Pardis Emami-naeini, Camille Cobb