![PP-1.jpg](https://static.wixstatic.com/media/c2a726_0f73515f6684464a9e2e5edc14c55b1e~mv2.jpg/v1/fill/w_154,h_121,al_c,q_80,usm_0.66_1.00_0.01,enc_auto/PP-1.jpg)
Mahdi Nasrullah Al-Ameen
​
Associate Professor
Department of Computer Science
Utah State University
​
​
mahdi[dot]al[hyphen]ameen[at]usu[dot]edu
If to choose between the sunny and a rainy day,
it's the later – it comes with a rainbow.
If to choose between an open city and dense woods,
it's the later – it signals unseen mysteries.
If to choose between bicycle and a car,
may be, the later – on some days, I am very lazy.
If to choose between a free trip to the moon and
a walk in evening – just anywhere – with a friend I care,
it's always the later…because…it matters…
Keeping Users Away from Clickbait
![clickbait.jpg](https://static.wixstatic.com/media/c2a726_d376f036a38a4487ad3007218ea0b965~mv2.jpg/v1/fill/w_323,h_171,al_c,q_80,usm_0.66_1.00_0.01,enc_auto/clickbait.jpg)
Social media sites such as Facebook are popular platforms for spreading clickbait, links with misleading titles that do not deliver on their promises. Not only does clickbait waste users' time, it often directs users to phishing sites and sites containing spyware and malware. In this project, we study users' clicking behavior and corresponding security mental models to better understand their vulnerability to clickbait and examine the effects of a wide range of social engineering techniques used to attract clicks from users. Our findings inform how to develop usable and effective interventions to protect users from clickbait.
Users' Awareness of, and Protection against Cyber Attacks
![Screen Shot 2020-08-12 at 7.33.11 PM.png](https://static.wixstatic.com/media/c2a726_1097a3195bd345749411751d77902aba~mv2.png/v1/fill/w_335,h_133,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Screen%20Shot%202020-08-12%20at%207_33_11%20PM.png)
In this project, we investigate users' perceptions of adversaries' strategies to gain access to their devices and accounts containing personal information and sensitive credentials. We examine how users identify an unauthorized access and protect their information from cyber attacks. Our analysis reveals the gaps between users' protection techniques and recommended best practices, leading to the design of usable tools and technologies to address these gaps in users' security behavior.
Publications
Mahdi Nasrullah Al-Ameen, Huzeyfe Kocabas. ``I cannot do anything'': User's Behavior and Protection Strategy upon Losing, or Identifying Unauthorized Access to Online Account. In Symposium on Usable Privacy and Security (SOUPS). August 2020. [sp]
​
Sovantharith Seng, Mahdi Nasrullah Al-Ameen, Matthew Wright. Understanding Users' Decision of Clicking on Posts in Facebook with Implications for Phishing. In IEEE S&P Workshop on Technology and Consumer Protection (ConPro). May 2018.
​
Sovantharith Seng, Huzeyfe Kocabas, Mahdi Nasrullah Al-Ameen, Matthew Wright. Understanding User’s Decision to Interact with Potential Phishing Posts on Facebook using a Vignette Study. In Proceedings of the ACM Conference on Computer and Communications Security (CCS). November 2019. [sp]
​
Sovantharith Seng, Mahdi Nasrullah Al-Ameen, Matthew Wright. Phishing on Facebook. In IEEE Symposium on Security and Privacy (IEEE S&P). May 2017. [sp]
​
*sp: short paper/poster session