CT-ISG: Usable Cyber Trust Indicators

CT-ISG：可用的网络信任指标

• 批准号: 0831428
• 负责人: Lorrie Cranor
• 金额: $ 38.67万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2012-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831428&HistoricalAwards=false
• 关键词: CT; ISG; Usable; Cyber; Trust

When systems rely on a "human in the loop" to carry out a security-critical function, cyber trust indicators are often employed to communicate when and how to perform that function. Indicators typically serve as warnings or status indicators that communicate information, remind users of information previously communicated, and influence behavior. They include a variety of security- and privacy-related symbols in the operating system status bar or browser chrome, pop-up alerts, security control panels, or symbols embedded in web content. However, a growing body of literature has found the effectiveness of many of these indicators to be rather disappointing. This research is systematically studying the effectiveness of cyber trust indicators and developing approaches to making these indicators most effective and usable. The researchers are using cognitive psychology's "mental models" approach to study how both expert and non-expert personal computer users understand common cyber trust indicators. They are also using the "Communication-Human Information Processing" (C-HIP) model from warnings science to structure their evaluation and provide insights into the human information processing steps at which a warning is mostly likely to fail. Using an iterative design process, they are developing improved indicators for several common applications and evaluating the effectiveness of these indicators. The expected results include a set of specific recommendations for improving a set of common cyber trust indicators, a set of design patterns for designing effective cyber trust indicators, and a curriculum module for teaching students how to design effective and usable cyber trust indicators.

当系统依赖于“循环中的人”来执行安全关键功能时，通常使用网络信任指标来沟通何时以及如何执行该功能。指标通常作为警告或状态指标，传达信息，提醒用户先前传达的信息，并影响行为。它们包括操作系统状态栏或浏览器chrome中的各种安全和隐私相关符号、弹出式警报、安全控制面板或嵌入web内容的符号。然而，越来越多的文献发现，许多这些指标的有效性相当令人失望。本研究系统地研究了网络信任指标的有效性，并制定了使这些指标最有效和可用的方法。研究人员正在使用认知心理学的“心智模型”方法来研究专家和非专家个人电脑用户如何理解常见的网络信任指标。他们还使用预警科学中的“沟通-人类信息处理”（C-HIP）模型来构建他们的评估，并提供对人类信息处理步骤的见解，在这些步骤中，预警最有可能失败。使用迭代设计过程，他们正在为几个常见的应用程序开发改进的指标，并评估这些指标的有效性。预期结果包括一套改进一套通用网络信任指标的具体建议，一套设计有效网络信任指标的设计模式，以及一个教授学生如何设计有效和可用的网络信任指标的课程模块。