Tuning Out Security Warnings: A Longitudinal Examination of Habituation Through fMRI, Eye Tracking, and Field Experiments

Key finding

Attention to repeated security warnings declined measurably in the brain across a workweek, partially recovering between days. In the field, adherence to permission warnings fell over three weeks, while warnings whose appearance varied (polymorphic designs) substantially reduced this habituation.

Why it matters

Shows that repetition of the same security stimulus trains people to tune it out, so feedback and nudges must vary to keep engaging fast neural systems.

Informs

• Keeps secure habits when tired or busy supports
• Varies content and cadence to prevent tune-out supports

Cite

Vance, A., Jenkins, J. L., Anderson, B. B., Bjornn, D. K., & Kirwan, C. B. (2018). Tuning Out Security Warnings: A Longitudinal Examination of Habituation Through fMRI, Eye Tracking, and Field Experiments. MIS Quarterly, 42(2), 355-380. https://doi.org/10.25300/MISQ/2018/14124