CT-T: Supporting Trust Decisions

CT-T：支持信任决策

• 批准号: 0524189
• 负责人: Lorrie Cranor
• 金额: --
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2010-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524189&HistoricalAwards=false
• 关键词: CT; Supporting; Trust; Decisions

ABSTRACT0524189Lorrie CranorCarnegie-Mellon UniversitySupporting Trust DecisionsInternet users frequently encounter situations in which they are asked to make implicit or explicit trust decisions. Examples of such decisions include decisions about whether or not to open an email attachment or provide information and decisions made in response to specific trust- or security-related prompts. The consequences of a wrong decision include infecting their own computers with malware or spyware, unwittingly propagating malware, and revealing information to con artists and identity thieves. Attackers are able to take advantage of most users' poor trust decision-making skills through a class of attacks known as "semantic attacks." While some efforts have been made to find ways of developing information systems that do not force users to make security- or trust-related decisions that they are not prepared to make, it is not always possible for systems to make accurate trust decisions on a user's behalf, especially when thosedecisions require knowledge of contextual information. There remain many trust decisions that users must therefore make on their own, usually with limited or no assistance or protections from theircomputer. The goal of this research is to develop approaches to supporting users when they make these trust decisions so that they are better informed and make the best decisions possible. The research will begin with a mental models study aimed at understanding and modeling how people make trust decisions in the online context and ultimately result in the development and evaluation of new software and design patterns.

Lorrie Cranor Carnegie-Mellon University支持信任决策Internet用户经常遇到要求他们做出隐式或显式信任决策的情况。此类决定的示例包括关于是否打开电子邮件附件或提供信息的决定，以及响应特定信任或安全相关提示的决定。错误决策的后果包括用恶意软件或间谍软件感染他们自己的计算机，在不知不觉中传播恶意软件，以及向诈骗艺术家和身份窃贼泄露信息。攻击者能够利用大多数用户糟糕的信任决策技能，通过一类被称为“语义攻击”的攻击。虽然已经作出了一些努力来开发不强迫用户作出他们不准备作出的与安全或信任有关的决定的信息系统，但系统并不总是可能代表用户作出准确的信任决定，特别是在这些决定需要了解背景信息的情况下。因此，仍然有许多信任决定是用户必须自己做出的，通常是在有限或没有来自计算机的帮助或保护的情况下做出的。这项研究的目标是开发支持用户做出这些信任决策的方法，以便他们获得更好的信息并尽可能做出最佳决策。这项研究将从一项心理模型研究开始，旨在理解和建模人们如何在在线环境中做出信任决定，并最终导致新软件和设计模式的开发和评估。