Yusra Elbitar

dblp:301/5896 · DBLP profile ↗
← Back
3ranked-venue papers
3as first author
3since 2021 · last 2025
0009-0007-8787-2950ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 2 first-author · 2 since 2021Human-computer interaction and ubiquitous computing · 1 · 1 first-author · 1 since 2021
YearPublicationVenuePosition
2025 Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns
abstract
Modern web applications use features like camera and geolocation for personalized experiences, requiring user permission via browser prompts.To explain these requests, applications provide rationales-contextual information on why permissions are needed.Despite their importance, little is known about how often rationales appear on the web or their influence on user decisions.This paper presents the first large-scale study of how the web ecosystem handles permission rationales, covering three areas: (i) identifying webpages that use permissions, (ii) detecting and classifying permission rationales, and (iii) analyzing their attributes to understand their impact on user decisions.We examined over 770K webpages from Chrome telemetry, finding 3.6K unique rationale texts and 749 rationale UIs across 85K pages.We extracted key rationale attributes and assessed their effect on user behavior by cross-referencing them with Chrome telemetry data.Our findings reveal nine key insights, providing the first evidence of how different rationales affect user decisions.
Yusra Elbitar, Soheil Khodayari, Marian Harbach, Gianluca De Stefano, Balazs Engedy, Giancarlo Pellegrino, Sven Bugiel
CHI1
2025 The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions
Yusra Elbitar, Alexander Hart, Sven Bugiel
NDSS1
2021 Explanation Beats Context: The Effect of Timing & Rationales on Users' Runtime Permission Decisions
Yusra Elbitar, Michael Schilling 0001, Trung Tin Nguyen, Michael Backes 0001, Sven Bugiel
USENIX Security Symposium1