CT-T User-Controllable Security and Privacy for Pervasive Computing

Norman Sadeh-Koniecpol卡内基梅隆大学0627513 Panel P060975 CT-T普适计算的用户可控安全和隐私移动设备及其支持的服务在个人和商业生活中日益成为中心，从而实现了各种普适计算应用。由于这些设备中的绝大多数都是不受管理的，因此非专业用户有责任处理它们带来的安全和隐私影响。 该项目旨在设计，实施和评估可用接口和底层技术，最终用户可以使用这些接口和底层技术（a）无缝地指定和管理其安全和隐私策略，以及（B）了解与他们交互的系统和个人所执行的策略的效果。众所周知，管理安全和隐私策略是一个困难的问题，因为用户通常不知道自己的策略或无法表达他们在移动的和普适计算设置中，这种情况通常由于接入设备的限制和用户倾向于同时参与的众多任务而加剧。该项目将安全、隐私和可用性问题交织在一起，系统地评估表现力、容错能力、用户负担和整体用户接受度之间的关键权衡，并开发新的机制和技术，帮助减轻这些权衡，最大限度地提高准确性和可信度，同时最大限度地减少最终用户所需的时间和精力。（1）开发新的用户界面和支持技术，以提高可用性，（2）编织学习，对话和解释技术，以最大限度地减少最终用户的负担，（3）短期和长期的实地研究，旨在评估上述技术的组合，在实际的普及计算设置。

Norman Sadeh-KoniecpolCarnegie Mellon University0627513Panel P060975CT-T User-Controllable Security and Privacy for Pervasive ComputingMobile devices and the services they support are increasingly becoming central in both personal and business life, enabling a variety of pervasive computing applications. Because the vast majority of these devices are unmanaged, lay users are responsible for handling the security and privacy implications they bring. This projects aims to design, implement and evaluate usable interfaces and underlying technologies with which end-users can (a) seamlessly specify and manage their security and privacy policies and (b) understand the effects of policies enforced by systems and individuals with which they interact.Managing security and privacy policies is well known to be a difficult problem as users often do not know their own policies or are unable to express them. In mobile and pervasive computing settings, this situation is often exacerbated by the limitations of access devices and the numerous tasks users tend to concurrently engage in. This project weaves together issues of security, privacy and usability to systematically evaluate key tradeoffs between expressiveness, tolerance for errors, burden on users and overall user acceptance, and develop novel mechanisms and technologies that help mitigate these tradeoffs maximizing accuracy and trustworthiness while minimizing the time and effort required by end users.This research combines three strands: (1) Developing novel user interfaces and supporting technologies to enhance usability, (2) Weaving learning, dialog, and explanation technologies to minimize end-user burden, and (3) Short- and long-term field studies aimed at evaluating combinations of the above techniques in practical pervasive computing settings.