Toward User Control over Information Access: A Sociotechnical Approach

Toward User Control over Information Access: A Sociotechnical Approach
复制标题

用户对信息访问的控制:社会技术方法

DOI:
10.1145/3584318.3584327
复制
发表时间:
2022
期刊:
Proceedings of the 2022 New Security Paradigms Workshop
影响因子:
--
通讯作者:
Feigenbaum, Joan
Feigenbaum, Joan
中科院分区:
--
文献类型:
--
作者:
Malchik, Caleb;Feigenbaum, Joan

文献摘要

参考文献

相似文献

我们研究网络用户和服务提供商之间的关系,采取社会技术方法,特别关注(但不限于)个人数据的隐私和安全。许多传统的Web安全实践旨在保护善意的个人和组织免受纯粹恶意的对手的攻击,以防止数据泄露,勒索软件攻击和拒绝服务等灾难性事件。相比之下,我们强调了许多传统安全技术试图保护的各方之间的动态。我们认为,用户和供应商之间的大多数互动都是隐性谈判,就像市场中买家和卖家之间的互动一样,既有对抗性,也有合作性。我们的目标是重新平衡这些谈判,以便赋予用户更多的权力;为此,我们提倡采用两种技术,一种是技术性的,一种是组织性的。从技术上讲,我们引入了不可信资源评估平台(PURE),这是一个内容标签框架,使用户能够对服务提供商做出明智的决策,降低了提供商诱导对他们比用户更有利的行为的能力,并且需要最少的时间和精力来使用。在组织方面,我们同意Gordon-Tapiero等人[19]的观点,即有必要采取集体方法来重新平衡用户和提供商之间的权力动态;特别是,我们建议数据合作社,Ligett和Nissim [25]以及Pentland和Hardjono [28]建议的组织形式,是部署PURE和类似工具的自然环境。
We study the relationship between Web users and service providers, taking a sociotechnical approach and focusing particularly (but not exclusively) on privacy and security of personal data. Much conventional Web-security practice seeks to protect benevolent parties, both individuals and organizations, against purely malevolent adversaries in an effort to prevent catastrophic events such as data breaches, ransomware attacks, and denial of service. By contrast, we highlight the dynamics among the parties that much conventional security technology seeks to protect. We regard most interactions between users and providers as implicit negotiations that, like the interactions between buyers and sellers in a marketplace, have both adversarial and cooperative aspects. Our goal is to rebalance these negotiations in order to give more power to users; toward that end we advocate the adoption of two techniques, one technical and one organizational. Technically, we introduce the Platform for Untrusted Resource Evaluation (PURE), a content-labeling framework that empowers users to make informed decisions about service providers, reduces the ability of providers to induce behaviors that benefit them more than users, and requires minimal time and effort to use. On the organizational side, we concur with Gordon-Tapiero et al. [19] that a collective approach is necessary to rebalance the power dynamics between users and providers; in particular, we suggest that the data co-op, an organizational form suggested by Ligett and Nissim [25] and Pentland and Hardjono [28], is a natural setting in which to deploy PURE and similar tools.
DOI: --
发表时间: 2023
期刊: Vanderbilt Journal of Entertainment and Technology Law
影响因子: --
作者:
Ayelet Gordon-Tapiero, Alexandra Wood
通讯作者: Ayelet Gordon-Tapiero, Alexandra Wood
建设新经济。
DOI: --
发表时间: 1998
期刊:
影响因子: --
作者:
L. Brown;J. Mitchell
通讯作者: J. Mitchell