Using warning systems with adaptable thresholds: Choice of security level, compliance and performance in a simulated computer security task

摘要

The aim of the study was to examine the potential benefits of warning systems with adaptable thresholds regarding user compliance and performance, and whether certain aspects of personality affect users' choice of threshold level. Most warning systems have low thresholds to reduce the number of misses. However, low thresholds produce large numbers of false alarms, which reduce users' trust in the system and lower their compliance with alarms, and thus can harm performance. Adaptable alarm systems that allow users to choose their preferred threshold could be a promising approach to mitigating problems associated with conventional warning systems. Within a simulation environment from the context of computer security, a fixed warning system with a conventional low threshold was compared to an adaptable system. Trust, compliance, performance, workload, and acceptance were measured. Additionally, various personality aspects were assessed, and their potential impact on the choice of threshold level was investigated. Participants working with the adaptable system reported higher levels of trust and acceptance as well as a lower workload. They complied more often with alarms, which led to better performance in comparison with the control group. Financial risk-taking was the only personality aspect related to the choice of threshold. The higher a participant's risk-taking tendency, the higher threshold they chose. Adaptable thresholds have the potential to improve users' interactions with warning systems and thus to increase security. In less safety-related cases such as computer security, adaptable thresholds could be a valuable alternative to the commonly applied fail-safe approach conventionally using low thresholds.