These applications allow cyber security professionals to access files that are involved in reported malicious online incidents. This is the part of a larger service offering to these users. 99% of the time, users understand that they are reviewing malicious files which can have a security risk to their system and network.
An individual recently downloaded some content in a non-secure way and got their system infected and we have been asked to put an explicit warning for users.
- There is no way of categorizing these particular downloads level of security risk. Some downloads may be malicious and others not.
- This is restricted access to security personnel.
- This won't be the actual text which will be provided later on to us.
Some initial concepts:
Option 1: Login Warning
Option 2: Clickthrough warning after login
Option 3: Passive warning on download
Option 4: Active warning on download (This is my preferred method)
I feel that I might need to use multiple ideas to get through the severity of the situation but I do not want to blind the 99% of the users who don't have any problem about using the site.
- Should the warning message be displayed every time the user logins or takes an action?
- Are there other concepts that I should be incorporating?
- Is it appropriate to include tips for downloading files safely (such as in a VM) since security can be perceived different from incident to incident?