CT-T: Supporting Trust Decisions

CT-T：支持信任决策

• 批准号: 0524189
• 负责人: Lorrie Cranor
• 金额: --
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2010-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524189&HistoricalAwards=false
• 关键词: CT; Supporting; Trust; Decisions

ABSTRACT0524189Lorrie CranorCarnegie-Mellon UniversitySupporting Trust DecisionsInternet users frequently encounter situations in which they are asked to make implicit or explicit trust decisions. Examples of such decisions include decisions about whether or not to open an email attachment or provide information and decisions made in response to specific trust- or security-related prompts. The consequences of a wrong decision include infecting their own computers with malware or spyware, unwittingly propagating malware, and revealing information to con artists and identity thieves. Attackers are able to take advantage of most users' poor trust decision-making skills through a class of attacks known as "semantic attacks." While some efforts have been made to find ways of developing information systems that do not force users to make security- or trust-related decisions that they are not prepared to make, it is not always possible for systems to make accurate trust decisions on a user's behalf, especially when thosedecisions require knowledge of contextual information. There remain many trust decisions that users must therefore make on their own, usually with limited or no assistance or protections from theircomputer. The goal of this research is to develop approaches to supporting users when they make these trust decisions so that they are better informed and make the best decisions possible. The research will begin with a mental models study aimed at understanding and modeling how people make trust decisions in the online context and ultimately result in the development and evaluation of new software and design patterns.

atcract0524189lorrie cranorcarnegie-mellon Universitysupporting Trust DiscisionsInternet用户经常遇到这些情况，在这种情况下，他们被要求做出隐式或明确的信任决定。此类决策的示例包括有关是否打开电子邮件附件或提供针对特定信任或安全相关的提示做出的信息和决定的决策。错误决定的后果包括用恶意软件或间谍软件感染自己的计算机，不知不觉地传播恶意软件，并向骗子和身份盗贼揭示信息。攻击者能够通过一类称为“语义攻击”的攻击来利用大多数用户的信任决策技巧不佳。尽管已经做出了一些努力来寻找开发信息系统的方法，而这些信息系统不会迫使用户做出不准备做出的安全性或与信任相关的决定，但系统并非总是有可能代表用户做出准确的信任决策，尤其是当Thosedisions需要上下文信息的知识时。因此，仍然存在许多信任决定，因此用户必须自行做出，通常在其计算机中没有帮助或保护措施。这项研究的目的是在用户做出这些信任决策时开发支持用户的方法，以便更好地了解并使最佳决策成为可能。该研究将从一项旨在理解和建模人们在在线环境中做出信任决策的心理模型研究开始，并最终导致对新软件和设计模式的开发和评估。