“They Keep Coming Back Like Zombies”: Improving Software Updating Interfaces Arunesh Mathur, Josefine Engel, Sonam Sobti, Victoria Chang, and Marshini Chetty, University of Maryland, College Park https://www.usenix.org/conference/soups2016/technical-sessions/presentation/mathur This paper is included in the Proceedings of the Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). June 22–24, 2016 • Denver, CO, USA ISBN 978-1-931971-31-7 Open access to the Proceedings of the Twelfth Symposium on Usable Privacy and Security (SOUPS 2016) is sponsored by USENIX. “They Keep Coming Back Like Zombies”: Improving Software Updating Interfaces Arunesh Mathur Josefine Engel Sonam Sobti
[email protected] [email protected] [email protected] Victoria Chang Marshini Chetty
[email protected] [email protected] Human–Computer Interaction Lab, College of Information Studies University of Maryland, College Park College Park, MD 20742 ABSTRACT ers”, and “security analysts” only install updates about half Users often do not install security-related software updates, the time more than non-experts [34]. Despite this evidence leaving their devices open to exploitation by attackers. We that there are factors influencing updating behaviors, the are beginning to understand what factors affect this soft- majority of research on software updates focuses on the net- ware updating behavior but the question of how to improve work and systems aspect of delivering updates to end users current software updating interfaces however remains unan- [17, 47, 24, 13, 23]. swered. In this paper, we begin tackling this question by However, a growing number of studies have begun to explore studying software updating behaviors, designing alternative the human side of software updates for Microsoft (MS) Win- updating interfaces, and evaluating these designs.