CT-T User-Controllable Security and Privacy for Pervasive Computing

Norman Sadeh-KoniecpolCarnegie Mellon University 0627513 Panel P060975CT-T用户可控的普适计算安全和隐私移动设备及其支持的服务正日益成为个人和商业生活中的核心，支持各种普适计算应用。该项目旨在设计、实施和评估可用的界面和底层技术，最终用户可以使用它们(A)无缝地指定和管理他们的安全和隐私策略，以及(B)了解他们与之交互的系统和个人实施的策略的影响。众所周知，管理安全和隐私策略是一个困难的问题，因为用户通常不知道他们自己的策略或无法表达这些策略。该项目将安全、隐私和可用性问题结合在一起，系统地评估表现力、容错性、用户负担和总体用户接受度之间的关键权衡，并开发新的机制和技术，帮助缓解这些权衡，最大限度地提高准确性和可信度，同时最大限度地减少最终用户所需的时间和精力。本研究结合三个方面：(1)开发新的用户界面和支持技术以增强可用性，(2)编织学习、对话和解释技术以最小化最终用户的负担，以及(3)旨在评估上述技术在实际普适计算环境中的组合的短期和长期实地研究。

Norman Sadeh-KoniecpolCarnegie Mellon University0627513Panel P060975CT-T User-Controllable Security and Privacy for Pervasive ComputingMobile devices and the services they support are increasingly becoming central in both personal and business life, enabling a variety of pervasive computing applications. Because the vast majority of these devices are unmanaged, lay users are responsible for handling the security and privacy implications they bring. This projects aims to design, implement and evaluate usable interfaces and underlying technologies with which end-users can (a) seamlessly specify and manage their security and privacy policies and (b) understand the effects of policies enforced by systems and individuals with which they interact.Managing security and privacy policies is well known to be a difficult problem as users often do not know their own policies or are unable to express them. In mobile and pervasive computing settings, this situation is often exacerbated by the limitations of access devices and the numerous tasks users tend to concurrently engage in. This project weaves together issues of security, privacy and usability to systematically evaluate key tradeoffs between expressiveness, tolerance for errors, burden on users and overall user acceptance, and develop novel mechanisms and technologies that help mitigate these tradeoffs maximizing accuracy and trustworthiness while minimizing the time and effort required by end users.This research combines three strands: (1) Developing novel user interfaces and supporting technologies to enhance usability, (2) Weaving learning, dialog, and explanation technologies to minimize end-user burden, and (3) Short- and long-term field studies aimed at evaluating combinations of the above techniques in practical pervasive computing settings.