Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites

Authors: 

Dominik Wermke, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, and Sascha Fahl, Leibniz University Hannover

Abstract: 

Cloud Office suites such as Google Docs or Microsoft Office 365 are widely used and introduce security and privacy risks to documents and sensitive user information. Users may not know how, where and by whom their documents are accessible and stored, and it is currently unclear how they understand and mitigate risks. We conduct surveys with 200 cloud office users from the U.S. and Germany to investigate their experiences and behaviours with cloud office suites. We explore their security and privacy perceptions and expectations, as well as their intuitions for how cloud office suites should ideally handle security and privacy. We find that our participants seem to be aware of basic general security implications, storage models, and access by others, although some of their threat models seem underdeveloped, often due to lacking technical knowledge. Our participants have strong opinions on how comfortable they are with the access of certain parties, but are somewhat unsure about who actually has access to their documents. Based on our findings, we distill recommendations for different groups associated with cloud office suites, which can help inform future standards, regulations, implementations, and configuration options.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {255678,
author = {Dominik Wermke and Nicolas Huaman and Christian Stransky and Niklas Busch and Yasemin Acar and Sascha Fahl},
title = {Cloudy with a Chance of Misconceptions: Exploring Users{\textquoteright} Perceptions and Expectations of Security and Privacy in Cloud Office Suites},
booktitle = {Sixteenth Symposium on Usable Privacy and Security ({SOUPS} 2020)},
year = {2020},
isbn = {978-1-939133-16-8},
pages = {359--377},
url = {https://www.usenix.org/conference/soups2020/presentation/wermke},
publisher = {{USENIX} Association},
month = aug,
}

Presentation Video