Interactions of Framing and Timing in Nudging Online Game Security

Abstract

Previous studies on applying the framing effects to cybersecurity nudges have shown that slight wording adjustments can predictably alter users’ security and privacy preferences. However, the applications mostly focus on the Reference-dependent preference, whereas limited information is available about another important embodiment, the Pseudo-certainty effect. In addition, it is also suggested that the framing effects are sensitive to the context, whereas known contributing contextual factors are limited. To solve the problems, we examine framing effects in cybersecurity in depth by designing two framing nudges based on the Pseudo-certainty effect and exploring their interactions with a contextual factor, timing. A between-subjects field experiment with 182 participants was conducted on a self-developed game to investigate the effectiveness of the framing nudges and timing in improving online game security. The participants were prompted to decide whether to set a game password. The results indicate that the framing of security warnings significantly affects users’ security decisions and behaviors, although their effects are moderated by the timing at which the warnings are presented. Finally, we conclude with practical security warning design implications.