Security Label Preferences

Thank you for your interest in this academic research survey! You are only eligible to participate in our survey if you are 18 years or older, located in the US, and know software development techniques. We ask that you read this form and ask any questions you may have before agreeing to be in the study.

The study is being conducted by Peter Caven, Amol Sangar, Shakthidhar Gopavaram, and Jean Camp of Indiana University Bloomington.


The purpose of this study is to gather your preferences for security labels through a virtual card sorting exercise.


Upon agreeing to participate in the study you will be asked to perform a card sorting activity and answer survey questions.

In the following activity, you will use features of proposed security labels and software bills of materials as a basis for your decision-making. For each card, consider if knowing the information prior to purchase is of benefit to you. We ask you to only consider the presented security feature. You will sort the card based on if it would help you make your decision. The next page will detail more instructions on the activity performance and the program’s interface.

You should be able to complete the study in approximately 30 minutes.


There is a risk of loss of confidentiality. Upon completion of the study and approval of the validity of your response, you will be paid $6.


Efforts will be made to keep your personal information confidential. We cannot guarantee absolute confidentiality. Your personal information may be disclosed if required by law. Your identity will be held in confidence in reports in which the study may be published. Our best efforts have been made to ensure the accuracy of the information you are provided about each project you may be asked to consider.

We will not compile any personally identifiable information from you. Non-identifiable statistics about your usage will be published. Information collected from you for this study may be used for future research studies or shared with other researchers for future research. Since there will be no identifying information, we will not ask for your additional consent.

Organizations that may inspect and/or copy your research records for quality assurance and data analysis include groups such as the study investigator and his/her research associates, and the Indiana University Institutional Review Board, and (as allowed by law) state or federal agencies, specifically the Office for Human Research Protections (OHRP) who may need access to your research records.


For questions about the study, contact the researcher Peter Caven at

For questions about your rights as a research participant or to discuss problems, complaints, or concerns about a research study, or to obtain information, or offer input, contact the IU Human Subjects Office at (812) 856-4242 or (800) 696-2949.


Taking part in this study is voluntary. You may choose not to take part or may leave the study at any time. Your decision whether or not to participate in this study will not affect your current or future relations with the researchers or Indiana University.