“Like Zombies They Keep Coming Back- Improving the User Experience of Software Updates”

Thu Feb 18, 2016 2:00 PM

Location: LTS Auditorium, 8080 Greenmead Drive

Marshini Chetty
College of Information Studies and UMIACS

Users may not install security-related software updates, which can open up their device to exploitation by attackers. Yet, we know little about why users avoid updates in the first place or how to convince users to apply security-related patches. Given that malware and cyber-attacks are on the rise, filling this gap in our knowledge is a crucial part of helping users to keep their systems secure.

In this talk, I outline the user barriers to software updates that we uncovered in a formative study of 125 users’ software updating practices. I then describe the design and evaluation of a low-fidelity, minimally intrusive, information-rich, user-centric software updating prototype created to address issues identified in the formative study.

Our findings suggest that updates are disruptive, provide insufficient information to convince users to apply updates, and that the updating process is confusing for most. Our studies also suggest that the broken user experience around updating is the major factor contributing to users avoiding software updates. Based on our findings, I make recommendations for increasing the chances of users adopting updates by fixing issues in the current user experience with the overall goal of enhancing security. I also outline directions for future work in this space.

Marshini Chetty is an assistant professor in the College of Information Studies at UMD specializing in human computer interaction and ubiquitous computing.

Her research focuses on making the Internet more efficient, affordable and secure from the user perspective via user studies and the design, implementation and evaluation of end-user facing technologies.

Chetty’s work is funded by the National Science Foundation, the Department of Defense, and a Google Faculty Research Award. She regularly publishes in top tier human computer interaction venues, such as CHI and Ubicomp.

Chetty holds a doctorate in human-centered computing from Georgia Institute of Technology and master’s and bachelors degrees in computer science from the University of Cape Town, South Africa.