"I know it's not right, but that's what it said to do": Investigating Trust in AI Chatbots for Cybersecurity Policy
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2025
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866917001557966848 |
|---|---|
| author | Lit, Brandon Crowder, Edward Vogel, Daniel Khan, Hassan |
| author_facet | Lit, Brandon Crowder, Edward Vogel, Daniel Khan, Hassan |
| contents | AI chatbots are an emerging security attack vector, vulnerable to threats such as prompt injection, and rogue chatbot creation. When deployed in domains such as corporate security policy, they could be weaponized to deliver guidance that intentionally undermines system defenses. We investigate whether users can be tricked by a compromised AI chatbot in this scenario. A controlled study (N=15) asked participants to use a chatbot to complete security-related tasks. Without their knowledge, the chatbot was manipulated to give incorrect advice for some tasks. The results show how trust in AI chatbots is related to task familiarity, and confidence in their ownn judgment. Additionally, we discuss possible reasons why people do or do not trust AI chatbots in different scenarios. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_08917 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | "I know it's not right, but that's what it said to do": Investigating Trust in AI Chatbots for Cybersecurity Policy Lit, Brandon Crowder, Edward Vogel, Daniel Khan, Hassan Human-Computer Interaction AI chatbots are an emerging security attack vector, vulnerable to threats such as prompt injection, and rogue chatbot creation. When deployed in domains such as corporate security policy, they could be weaponized to deliver guidance that intentionally undermines system defenses. We investigate whether users can be tricked by a compromised AI chatbot in this scenario. A controlled study (N=15) asked participants to use a chatbot to complete security-related tasks. Without their knowledge, the chatbot was manipulated to give incorrect advice for some tasks. The results show how trust in AI chatbots is related to task familiarity, and confidence in their ownn judgment. Additionally, we discuss possible reasons why people do or do not trust AI chatbots in different scenarios. |
| title | "I know it's not right, but that's what it said to do": Investigating Trust in AI Chatbots for Cybersecurity Policy |
| topic | Human-Computer Interaction |
| url | https://arxiv.org/abs/2510.08917 |