Change search
Link to record
Permanent link

Direct link
Kitkowska, AgnieszkaORCID iD iconorcid.org/0000-0001-7384-4552
Publications (10 of 33) Show all publications
Kitkowska, A., Gerken, J. F., Wang, Z. & Ferwerda, B. (2026). “Abort the Login”: Understanding Phishing Susceptibility Through Warning Design in the Context of 2FA. In: N. Arastouei, M. Jensen, K. Rannenberg (Ed.), Privacy Technologies and Policy: 13th Annual Privacy Forum, APF 2025, Frankfurt am Main, Germany, October 22–23, 2025, Proceedings. Paper presented at 13th Annual Privacy Forum, APF 2025, Frankfurt am Main, 22 October 2025 - 23 October 2025 (pp. 29-48). Springer
Open this publication in new window or tab >>“Abort the Login”: Understanding Phishing Susceptibility Through Warning Design in the Context of 2FA
2026 (English)In: Privacy Technologies and Policy: 13th Annual Privacy Forum, APF 2025, Frankfurt am Main, Germany, October 22–23, 2025, Proceedings / [ed] N. Arastouei, M. Jensen, K. Rannenberg, Springer, 2026, p. 29-48Conference paper, Published paper (Other academic)
Abstract [en]

Social engineering attacks are successful due to the exploitative nature of human psychology. Although security solutions, such as 2FA, aim to reduce the severity of attacks, these approaches tend to be insufficient considering sophisticated phishing attacks. In the present paper, we investigate how the design of the 2FA method may influence the likelihood of a login to a malicious website. Through an online experiment with N=94 participants, we show that contrary to common assumptions, warning designs prompting to proceed with login might have a contradicting effect. In contrast, designs that prompt users to abort the login have minimal desired effects. Moreover, we identify that involvement in login activity and confidence in the decision made had further significant effects on the likelihood of login. Our exploratory results contribute to the knowledge of susceptibility to phishing attacks and potential misconceptions about the effects of opinionated design in the context of 2FA.

Place, publisher, year, edition, pages
Springer, 2026
Series
Lecture Notes in Computer Science, ISSN 0302-9743, E-ISSN 1611-3349 ; 16183
Keywords
2FA, Phishing Susceptibility, Warning Design, Behavioral research, Cyber attacks, Network security, Phishing, Human psychology, On-line experiments, Phishing attacks, Security solutions, Social engineering, Computer crime
National Category
Computer and Information Sciences
Identifiers
urn:nbn:se:hj:diva-70167 (URN)10.1007/978-3-032-07574-1_2 (DOI)2-s2.0-105020266027 (Scopus ID)978-3-032-07574-1 (ISBN)978-3-032-07573-4 (ISBN)
Conference
13th Annual Privacy Forum, APF 2025, Frankfurt am Main, 22 October 2025 - 23 October 2025
Available from: 2025-11-12 Created: 2025-11-12 Last updated: 2025-11-12Bibliographically approved
Alaqra, A. S., Kitkowska, A. & Martucci, L. (2025). AI in education: Pedagogical possibilities and challenges. In: Carina Vikström & Mikael Svandberg (Ed.), Bidrag från Högskolepedagogisk utvecklingsdag 2024: (pp. 31-45). Karlstad: Karlstads universitet
Open this publication in new window or tab >>AI in education: Pedagogical possibilities and challenges
2025 (English)In: Bidrag från Högskolepedagogisk utvecklingsdag 2024 / [ed] Carina Vikström & Mikael Svandberg, Karlstad: Karlstads universitet, 2025, p. 31-45Chapter in book (Refereed)
Abstract [en]

In this chapter, we present the pedagogical possibilities of AI as well as the challenges it poses in education. AI is not merely a new technological tool but represents a fundamental shift in how students interact with knowledge, assignments, and learning environments. As educators, we must navigate questions of academic integrity, skill development, and pedagogical alignment, as AI tools are increasingly becoming part of learning and assessment practices. We consider how AI can support learning and possibly replace traditional methods; however, concerns about overreliance, misinformation, and the erosion of critical thinking remain. We share examples based on examination instances, honesty statements, and our observations on the impact of these tools on the learning experiences of students at Karlstad University and Jönköping University. These insights stem from our recent experiences, as well as students’ reflections and behaviors. Finally, we share insights and takeaways for the future use of AI in teaching and assessment, emphasizing the importance of transparent communication, clear boundaries, and a pedagogical focus on learning outcomes.

Place, publisher, year, edition, pages
Karlstad: Karlstads universitet, 2025
Series
Utveckling av undervisning och examination i högre utbildning: utgiven av Universitetspedagogiska enheten vid Karlstads universitet ; 2025:2
National Category
Pedagogy
Identifiers
urn:nbn:se:hj:diva-70600 (URN)978-91-7867-639-2 (ISBN)978-91-7867-640-8 (ISBN)
Available from: 2026-01-15 Created: 2026-01-15 Last updated: 2026-01-15Bibliographically approved
Brodén, K., Andersson, J., Kitkowska, A., Ahmad, A. & Mozelius, P. (2025). Gathering requirements for IoT-assisted wellbeing in elementary school—a multi-stakeholder perspective. Frontiers in Education, 10, Article ID 1580666.
Open this publication in new window or tab >>Gathering requirements for IoT-assisted wellbeing in elementary school—a multi-stakeholder perspective
Show others...
2025 (English)In: Frontiers in Education, E-ISSN 2504-284X, Vol. 10, article id 1580666Article in journal (Refereed) Published
Abstract [en]

Introduction: Students experiencing poor wellbeing in elementary school can suffer lifelong consequences, including low self-esteem or depression. Understanding how to increase student wellbeing through information-based approaches is therefore important. While previous research has explored wellbeing frameworks, this study uniquely investigates the intersection of elementary school wellbeing with Internet of Things (IoT) implementation potential.

Method: We present the first comprehensive requirements analysis gathered from both staff and students for improving wellbeing in an elementary school in rural Sweden, with the aim of implementing IoT solutions. We collected qualitative data through individual interviews and workshops with 25 staff members and a survey from 464 students. We analyzed the data in an inductively and deductively way, using the Konu and Rimpelä’s wellbeing framework.

Results: Our novel findings reveal alignment between staff and student perspectives across the framework’s categories: having, loving, being and health. One example is the importance of motivation in each learning situation and creating a foundation for good social relations among the students. The requirements related to the health category received the least attention, reflecting less focus on individual student circumstances.

Discussion: This study contributes new knowledge by detailing wellbeing needs for elementary school and relating them to data-driven innovation, such as IoT, for gathering both objective and subjective information. We also acknowledge that this creates additional demands on current solutions and raises significant privacy concerns in school environments. Future research will incorporate expert IoT knowledge and develop prototype solution based on these identified requirements.

Place, publisher, year, edition, pages
Frontiers Media S.A., 2025
Keywords
elementary school, Internet of Things (IOT), requirements, stakeholders, wellbeing
National Category
Information Systems, Social aspects Educational Sciences
Identifiers
urn:nbn:se:hj:diva-69356 (URN)10.3389/feduc.2025.1580666 (DOI)001521920200001 ()2-s2.0-105009911770 (Scopus ID)GOA;;1026892 (Local ID)GOA;;1026892 (Archive number)GOA;;1026892 (OAI)
Available from: 2025-07-16 Created: 2025-07-16 Last updated: 2025-10-13Bibliographically approved
Kitkowska, A. (2025). The AI-empowered dark patterns. In: Per Kristensson, Lars Witell & Mohamed Zaki (Ed.), Handbook of service experience: (pp. 257-270). Cheltenham: Edward Elgar Publishing
Open this publication in new window or tab >>The AI-empowered dark patterns
2025 (English)In: Handbook of service experience / [ed] Per Kristensson, Lars Witell & Mohamed Zaki, Cheltenham: Edward Elgar Publishing, 2025, p. 257-270Chapter in book (Refereed)
Abstract [en]

Dark patterns (deceptive designs that intend to trick technology users into doing something they did not originally intend) are considered a threat to the well-functioning digital market and harmful to consumers. So far, much attention has been given to ‘traditional’ dark patterns, relying on the weaknesses of human cognition. Various classifications of dark patterns have been proposed to aid the recognition and regulation of the phenomena. Nevertheless, little attention has been given to artificial intelligence’s (AI) role in dark patterns and how it might affect consumers’ experience and the market. The present chapter addresses this gap through the analysis of hypothetical scenarios of AI-empowered dark patterns and the adverse effects they may generate, particularly on consumers’ experience.

Place, publisher, year, edition, pages
Cheltenham: Edward Elgar Publishing, 2025
Keywords
Dark patterns, Privacy, AI, Digital market, Harms
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:hj:diva-69835 (URN)10.4337/9781035300198.00028 (DOI)2-s2.0-105003157462 (Scopus ID)978-1-03530-018-1 (ISBN)978-1-03530-019-8 (ISBN)
Available from: 2025-09-26 Created: 2025-09-26 Last updated: 2025-10-13Bibliographically approved
Kitkowska, A. & Schulman, Y. (2024). Assessing and combatting the negative effects of FemTech dataveillance. In: Proceedings on Privacy Enhancing Technologies: . Paper presented at PETS2024: Privacy, Safety, and Trust in Mobile Health Apps Workshop.
Open this publication in new window or tab >>Assessing and combatting the negative effects of FemTech dataveillance
2024 (English)In: Proceedings on Privacy Enhancing Technologies, 2024Conference paper, Published paper (Refereed)
Abstract [en]

FemTech — i.e., mobile technologies for female health and well-being — is a rapidly growing industry. Marketed as tools of women’sempowerment, these mHealth applications not only bear risks sim-ilar to other mHealth and “dataveillance” apps, but also introduceunique, often exploitative, risks to user privacy and individualrights (education, work, fundamental), self-identity and mentalhealth (self-concept, self-esteem, personality), self-actualizationand physical health (socioeconomic freedoms, personal control,health decisions). In this paper, we draw attention to the potentialnegative implications and discuss privacy risks resulting from thecurrent design of FemTech apps. We argue that a holistic approachexamining and informing FemTech app design is necessary to makewomen’s empowerment the primary and true outcome for the users.We suggest drawing on the theories of intersectionality and contex-tual integrity to analyze and improve the design in FemTech, andwe would like to invite HCI researchers to further discuss this andother ideas, understandings, and potential solutions. (3) (PDF) Assessing and Combatting the Negative Effects of FemTech Dataveillance.

Keywords
femtech, dataveillance, mHealth, privacy, intersectionality
National Category
Computer and Information Sciences
Identifiers
urn:nbn:se:hj:diva-66476 (URN)
Conference
PETS2024: Privacy, Safety, and Trust in Mobile Health Apps Workshop
Funder
Swedish Foundation for Strategic ResearchKnut and Alice Wallenberg Foundation
Note

Workshop paper.

Available from: 2024-10-28 Created: 2024-10-28 Last updated: 2025-10-13Bibliographically approved
Shulman, Y., Kitkowska, A., Warner, M. & Meyer, J. (2024). Conceal or reveal: (non)disclosure choices in online information sharing. Behavior and Information Technology, 43(16), 4125-4149
Open this publication in new window or tab >>Conceal or reveal: (non)disclosure choices in online information sharing
2024 (English)In: Behavior and Information Technology, ISSN 0144-929X, E-ISSN 1362-3001, Vol. 43, no 16, p. 4125-4149Article in journal (Refereed) Published
Abstract [en]

People typically enhance their online personas by sharing favourable personal information. Nevertheless, sharing of unfavourable information about oneself still occurs and is essential in some online contexts (e.g. allowing negative reviews). It remains unclear why people reveal potentially damaging information. We conducted an online experiment ((Formula presented.)) to explore the effects of feedback properties and individual characteristics on online information sharing in two contexts (social and socioeconomic) where personal ratings are essential. We allowed users to conceal their personal rating if it dropped below a threshold. The context was the primary determinant of the threshold users chose. Control availability and feedback content triggered additional considerations and caused some users to change their (non)disclosure choices. However, many users relied on their priors (experience, assumptions) rather than on new information. Our findings show how people may fail to identify the impact of nondisclosure, which may signal undesirable information to others. These findings challenge the reliance on holding users solely accountable for their ‘informedness’ vis-à-vis disclosure of their personal information.

Place, publisher, year, edition, pages
Taylor & Francis, 2024
Keywords
(Non)disclosure, controls, decision-making, feedback, self-presentation, sharing economy, Behavioral research, Decision making, Economics, Information analysis, Information dissemination, Decisions makings, Individual characteristics, Information sharing, On-line experiments, Online information, Personal information, Property, Self presentations, adult, article, economic aspect, feedback system, female, human, identifiable information, interpersonal communication, male, self concept
National Category
Information Systems
Identifiers
urn:nbn:se:hj:diva-66458 (URN)10.1080/0144929X.2024.2304613 (DOI)001152057400001 ()2-s2.0-85183856429 (Scopus ID)HOA;intsam;979205 (Local ID)HOA;intsam;979205 (Archive number)HOA;intsam;979205 (OAI)
Funder
EU, Horizon 2020, 675730
Available from: 2024-10-22 Created: 2024-10-22 Last updated: 2025-10-13Bibliographically approved
Islami, L., Kitkowska, A. & Fischer-Hübner, S. (2024). Inter-regional Lens on the Privacy Preferences of Drivers for ITS and Future VANETs. In: F. F. Mueller, P. Kyburz, J. R. Williamson, C. Sas, M. L. Wilson, P. T. Dugas, I. Shklovski (Ed.), Conference on Human Factors in Computing Systems: 2024 CHI Conference on Human Factors in Computing Systems. Paper presented at 2024 CHI Conference on Human Factors in Computing Systems, CHI 2024 Hybrid, Honolulu 11 May 2024 through 16 May 2024. ACM Digital Library
Open this publication in new window or tab >>Inter-regional Lens on the Privacy Preferences of Drivers for ITS and Future VANETs
2024 (English)In: Conference on Human Factors in Computing Systems: 2024 CHI Conference on Human Factors in Computing Systems / [ed] F. F. Mueller, P. Kyburz, J. R. Williamson, C. Sas, M. L. Wilson, P. T. Dugas, I. Shklovski, ACM Digital Library, 2024Conference paper, Published paper (Refereed)
Abstract [en]

Intelligent Transportation Systems (ITS) are on the rise, yet the knowledge about privacy preferences by different types of drivers in this context needs to be improved. This paper presents survey-based research (N = 528) focusing on preferences of drivers from South Africa and the Nordic countries for data processing and sharing by ITS, including future vehicular ad hoc networks. Our results indicate regionally framed drivers' privacy attitudes and behaviours. South African participants have higher privacy concerns and risk perception. However, their preferences to share location data with police, family and friends, emergency services, and insurance companies are higher. Moreover, the region significantly affects preferences for transparency and control and sharing frequency, as well as willingness to pay for privacy, which are higher among the South Africans. We discuss how our results on factors, including region, impacting drivers' privacy preferences can contribute to the design of usable privacy and identity management for ITS.

Place, publisher, year, edition, pages
ACM Digital Library, 2024
Keywords
cross-regional comparison, Intelligent transportation, privacy preferences, privacy-enhancing technologies (PETs), vehicular communication, Behavioral research, Emergency services, Insurance, Intelligent systems, Intelligent vehicle highway systems, Vehicular ad hoc networks, Intelligent transportation systems, Nordic countries, Privacy enhancing technologies, Privacy-enhancing technology, South Africa, Survey-based research, Vehicular communications, Risk perception
National Category
Information Systems Transport Systems and Logistics
Identifiers
urn:nbn:se:hj:diva-64781 (URN)10.1145/3613904.3641997 (DOI)001255317902008 ()2-s2.0-85194875475 (Scopus ID)979-8-4007-0330-0 (ISBN)
Conference
2024 CHI Conference on Human Factors in Computing Systems, CHI 2024 Hybrid, Honolulu 11 May 2024 through 16 May 2024
Funder
Swedish Foundation for Strategic ResearchKnut and Alice Wallenberg Foundation
Available from: 2024-06-10 Created: 2024-06-10 Last updated: 2026-01-20Bibliographically approved
Kitkowska, A., Alaqra, A. S. & Wästlund, E. (2024). Lockdown locomotion: the fast-forwarding effects of technology use on digital well-being due to COVID-19 restrictions. Behavior and Information Technology, 43(6), 1178-1205
Open this publication in new window or tab >>Lockdown locomotion: the fast-forwarding effects of technology use on digital well-being due to COVID-19 restrictions
2024 (English)In: Behavior and Information Technology, ISSN 0144-929X, E-ISSN 1362-3001, Vol. 43, no 6, p. 1178-1205Article in journal (Refereed) Published
Abstract [en]

Increasing dependency on digital technologies introduces queries related to well-being–when and how digital technology poses a threat, or when it is the most appreciated by users? People have some expectations before using technology, which sometimes may be met, but there might be a mismatch at other times. Nevertheless, the digitalization of services advances and companies modify existing or produce new technologies that do not satisfy users' demands, putting their well-being at risk. Through an empirical inquiry, the present research explores experiences with technologies to shed more light on the main factors that enrich or diminish technology value and influence well-being. Exploiting the circumstances created by the COVID-19 pandemic that fast-forwarded technology use and development, an online inquiry was conducted to assess positive and negative experiences of technologies, focusing on the contexts of work, learning, entertainment, information-seeking, and health. The findings from 578 participants indicate that depending on the role of technologybeing a substitute for certain activities or an opportunity to perform them differently–consequences on well-being can more or less follow expectations. The results are discussed in the context of past research and practical implications for, e.g. technology design or managerial changes that could help overcome users' current challenges.

Place, publisher, year, edition, pages
Taylor & Francis, 2024
National Category
Human Computer Interaction
Identifiers
urn:nbn:se:hj:diva-60273 (URN)10.1080/0144929X.2023.2203268 (DOI)000971640300001 ()2-s2.0-85153409540 (Scopus ID)HOA;;877473 (Local ID)HOA;;877473 (Archive number)HOA;;877473 (OAI)
Available from: 2023-04-27 Created: 2023-04-27 Last updated: 2025-10-13Bibliographically approved
Kitkowska, A., Broden, K. & Abdullah, L. (2024). The Requirements, Benefits, and Barriers of IoT Solutions to Support Well-Being in Elementary Schools. IEEE Access, 12, 144965-144981
Open this publication in new window or tab >>The Requirements, Benefits, and Barriers of IoT Solutions to Support Well-Being in Elementary Schools
2024 (English)In: IEEE Access, E-ISSN 2169-3536, Vol. 12, p. 144965-144981Article in journal (Refereed) Published
Abstract [en]

In most parts of the world, minors' access to education is guaranteed, resulting in most of their time being spent in the school building. Similarly, school staff spend a relatively long time in the same building. This unique setting requires both groups to stay inside the school walls throughout the working days, which might negatively affect their well-being. Studies show that low indoor air quality might negatively affect well-being. Moreover, school staff and students mention other problems, such as worrisome declining students' attendance, motivation, social relations, safety, stress, and pressure, among others. Technological solutions, such as IoT-based systems, might be one way to tackle the well-being issue at schools. However, most of the existing solutions focus on the quality of the indoor environment, disregarding the needs and pains of school inhabitants. In the current article, we present an investigation of how IoT-based solutions could extend beyond solely environment-measuring tools and fulfill the needs of school inhabitants. Through an interview study with eleven IoT experts guided by user (school inhabitants) requirements identified in the previous research, we assess functional and non-functional system requirements that such systems should build on. These are discussed against the five-layer IoT architecture model. Moreover, the study identifies barriers and benefits of IoT-based solutions, which are discussed in the context of existing scientific and legal frameworks. The exploratory findings presented in the paper could be used as a guide for decision-makers at schools to ensure that the students' and staff's well-being is maintained, as well as by IoT suppliers to produce holistic or compatible solutions that could be easily integrated into the unique contexts of school.

Place, publisher, year, edition, pages
IEEE, 2024
Keywords
IoT, IoT architecture, IoT in Schools, Privacy, Security, User requirements, Well-being, Decision making, Indoor air pollution, Elementary schools, Indoor air quality, IoT in school, Student attendances, Well being, Students
National Category
Information Systems
Identifiers
urn:nbn:se:hj:diva-66457 (URN)10.1109/ACCESS.2024.3469558 (DOI)001336075400001 ()2-s2.0-85205867257 (Scopus ID)GOA;intsam;979204 (Local ID)GOA;intsam;979204 (Archive number)GOA;intsam;979204 (OAI)
Available from: 2024-10-22 Created: 2024-10-22 Last updated: 2025-10-13Bibliographically approved
Kitkowska, A., Shulman, Y., Martucci, L. A. & Wästlund, E. (2023). Designing for privacy: Exploring the influence of affect and individual characteristics on users' interactions with privacy policies. Computers & Security, 134, Article ID 103468.
Open this publication in new window or tab >>Designing for privacy: Exploring the influence of affect and individual characteristics on users' interactions with privacy policies
2023 (English)In: Computers & Security, ISSN 0167-4048, E-ISSN 1872-6208, Vol. 134, article id 103468Article in journal (Refereed) Published
Abstract [en]

Consenting to digital services' privacy policies is standard practice. It often occurs at the early stage of interactions with a given service—during the sign-up process. Still, the most common way of acquiring consent from users is through their acknowledgment of policies by ticking a box. Consequently, users consent, mostly blindly, as they are unlikely to review the full text of policies. The current article presents research investigating factors that may impact user interaction with privacy policies, focusing on the underresearched topic of affective states (valence and arousal). The results of an online experiment (N=88) indicate that privacy policy design can elicit specific affective responses and, when accounting for some characteristics of individuals (e.g., personality traits), it can influence users' attitudes and behaviors. Particularly, the findings show that privacy awareness and willingness to disclose information might be impacted. Additionally, the analysis of collected data suggests significant associations between some personality traits and affective states, as well as a strong relationship between privacy concerns and willingness to disclose information, contradicting the concept of privacy paradox, often discussed in the privacy literature. Moreover, the results of our qualitative inquiry, where the study respondents had a chance to elaborate on their decisions to agree or disagree with the privacy policy by answering an open-ended question, confirm the quantitative findings, and reveal some of the users needs considering the sign-up process.

Place, publisher, year, edition, pages
Elsevier, 2023
Keywords
Attitudes and behaviors, Decision-making, Framing, Privacy, Privacy policy, Visual cues, Affective state, Attitude and behavior, Decisions makings, Individual characteristics, Personality traits, Privacy policies, User interaction, Decision making
National Category
Human Computer Interaction
Identifiers
urn:nbn:se:hj:diva-62529 (URN)10.1016/j.cose.2023.103468 (DOI)001081345600001 ()2-s2.0-85171144588 (Scopus ID)HOA;intsam;906459 (Local ID)HOA;intsam;906459 (Archive number)HOA;intsam;906459 (OAI)
Funder
EU, Horizon 2020, 675730
Available from: 2023-09-25 Created: 2023-09-25 Last updated: 2025-10-13Bibliographically approved
Organisations
Identifiers
ORCID iD: ORCID iD iconorcid.org/0000-0001-7384-4552

Search in DiVA

Show all publications