Computer Security and Privacy for Refugees in the United States
Computer Security and Privacy for Refugees in the United States
复制标题
美国难民的计算机安全和隐私
DOI：
10.1109/sp.2018.00023
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Tadayoshi Kohno
中科院分区：
文献类型：
--
作者：
Lucy Simko;Ada Lerner;Samia Ibtasam;Franziska Roesner;Tadayoshi Kohno
在这项工作中，我们考虑了在美国重新安置的难民的计算机安全和隐私惯例。 ，他们面临的障碍可能会使他们处于危险之中？对与当地非政府组织的难民一起工作的案例经理和老师的深入定性访谈，以及与难民本身的焦点小组。并找到他们的案件经理和老师的帮助；实践“不可行。与此同时，我们确定了针对难民的计算机安全和隐私面临的根本挑战，包括由于技术专长，语言技能和文化知识有限的障碍，例如，我们发现骗局是威胁是一种新概念对于我们研究的许多难民，许多常见的安全实践（例如，密码创建技术和安全问题）都依赖于我们的文化知识。调查结果，我们提出了针对计算机安全社区的建议，以更好地满足计算机安全和隐私需求以及难民的约束，这是一种潜在的脆弱人群，在这种情况下以前尚未研究。
In this work, we consider the computer security and privacy practices and needs of recently resettled refugees in the United States. We ask: How do refugees use and rely on technology as they settle in the US? What computer security and privacy practices do they have, and what barriers do they face that may put them at risk? And how are their computer security mental models and practices shaped by the advice they receive? We study these questions through in-depth qualitative interviews with case managers and teachers who work with refugees at a local NGO, as well as through focus groups with refugees themselves. We find that refugees must rely heavily on technology (e.g., email) as they attempt to establish their lives and find jobs; that they also rely heavily on their case managers and teachers for help with those technologies; and that these pressures can push security practices into the background or make common security "best practices" infeasible. At the same time, we identify fundamental challenges to computer security and privacy for refugees, including barriers due to limited technical expertise, language skills, and cultural knowledge–for example, we find that scams as a threat are a new concept for many of the refugees we studied, and that many common security practices (e.g., password creation techniques and security questions) rely on US cultural knowledge. From these and other findings, we distill recommendations for the computer security community to better serve the computer security and privacy needs and constraints of refugees, a potentially vulnerable population that has not been previously studied in this context.