Security Implications of User Non-compliance Behavior to Software Updates: A Risk Assessment Study

• DOI: 10.48550/arxiv.2411.06262
• Publication Date: 2024-11-09
• Authors: Mahzabin Tamanna; Joseph D Stephens; Mohd Anwar
• Keywords: Software Engineering (cs.SE); FOS: Computer and information sciences; Computer Science - Software Engineering; Computer Science - Human-Computer Interaction; Human-Computer Interaction (cs.HC)

Software updates are essential to enhance security, fix bugs, and add better features existing software. However, while some users comply update their systems upon notification, non-compliance is common. Delaying or ignoring leaves exposed security vulnerabilities. Despite research efforts, users' noncompliance behavior with software still prevalent. In this study, we explored how psychological factors influence perception toward updates. addition, proposed a model assess the risk score associated delaying We conducted user study Windows OS explore information about potential vulnerabilities scores behavior. Furthermore, also studied of demographic such as gender on decision-making process for Our results showed that traits, knowledge, awareness, experience, impact To increase compliance, providing not updating statistically significantly increased willingness systems. Additionally, our indicated no significant difference in male female responses terms concerns securing The implications relevant developers manufacturers they can use design more effective notification messages. Highlighting risks corresponding future motivate act promptly timely manner, which ultimately improve overall system.