DPTrek
SaTC 2.0: EDU: Experiential Learning of Dark Patterns for Cybersecurity and Privacy
Summary

Online users are increasingly using websites and software applications to access important services that support their well-being and quality of life, including their healthcare, learning opportunities, and many products and services. For those with limited digital literacy, this growing use increases their exposure to cyber risks. One of the most common and concerning risks they face is so-called Dark Patterns, that is, user interface designs that trick users into making unintended decisions such as giving their consent to unwanted subscriptions or revealing personal information. Dark Pattern designs can also make it difficult for these users to opt out of data collection. It is therefore crucial for people who are not computer experts to become more aware of and educated about these risks. Unfortunately, current cyber education is generally limited to generic warnings and lacks real-world examples to effectively and safely educate them and fails to keep pace with the rapid evolution of dark patterns, especially as AI and machine learning are increasingly employed.
This project is bridging the critical gap by developing a dark patterns learning platform aimed at raising people’s awareness of dark patterns and improving their literacy in navigating dark patterns in real life. By integrating knowledge and methodologies from dark patterns research, educational science, human-computer interaction, and software engineering, the platform provides real-world experiential components, is especially tailored for older adults and those lacking computer expertise. The investigators of this project are prototyping and tailoring the learning platform through formative evaluation, evaluating the effectiveness of the platform through expert inspections and evaluation, and refining the system by developing an updating framework that enables non-technical educators to make no-code updates. The investigators are also robustly evaluating and broadly disseminating the learning platform to local and nationwide communities, and training researchers in dark pattern education and mitigation.
Support
- NSF Award No. 2520321
- Additional support: 2024-25 Seed Funding Program at UCF
People
- Xueqiang (Brandon) Wang. PI on this project (UCF CS & Cyber Cluster).
- Yao Li. Co-PI on this project (UCF SMST & Cyber Cluster).
- YunYing (Susan) Zhong. Co-PI on this project (UCF Hospitality & DAT Cluster)
- Sumanth Reddy Gutha, M.S. Student Researcher (UCF CS)
- Safoora Moazam, M.S. Student Researcher (UCF SMST)
- Jingzhou Ye, Ph.D. Student Researcher (UCF CS)
Publications
[Conference] Jingzhou Ye, Zhaojie Hu, Yao Li, and Xueqiang Wang. “When Designers Meet GenAI: Understanding the Role of Prompt-to-Design Generators in Privacy Dark Patterns.” In Proceedings of IEEE Security & Privacy’26.
[Conference] Jingzhou Ye, Fares Alharbi, Luyi Xing, and Xueqiang Wang. “Understanding and Analyzing Privacy Risks in Mobile Consent-Management Platforms.” In Proceedings of IEEE Security & Privacy’26.
Software and Datasets
- Prototype of DPTrek
- Source code of DPTrek (Not open to the public yet due to ongoing development)
- Dataset for paper PRODEGENS
Outreach
- 2026, The project website is publicly accessible, and educational materials will be shared here to support public access.
- 2025, Demonstrations at Legacy Pointe Health Research Fair, “Surviving the Web Jungle: Your Guide to Spotting and Navigating Dark (Deceptive) Patterns on Websites”, Orlando, FL.
- 2025, Presentation to LIFE at UCF, “What Makes Online Services Tricky and Deceptive? Exploring Common Dark Patterns and Their Impact on User Experience”, Orlando, FL
