CT-M: Theory and Practice of Accountable Systems

问责制度理论和实践项目调查了信息网络的计算和社会性质，这是对信息使用规则和政策遵守情况进行可靠评估所必需的。在先前的研究中，项目负责人已经证明，要在开放的信息网络中实现基本的社会政策目标，就需要通过事后发现违规行为，更多地依赖信息问责。这种方法与网络环境中的传统策略合规机制形成对比，网络环境中的传统机制依赖安全技术通过拒绝访问面临滥用风险的资源来执行规则。因此，基于准入的制度必须辅之以基于问责的制度。为了确保问责系统能够为未来的社会政策安排提供稳定、可靠和值得信赖的基础，有必要：1)研究大规模设计这些系统的实用工程方法；2)开发问责系统运行动态的理论，以确定可以进行哪些类型的问责评估，何时这些断言是可靠的，以及问责系统可能面临的攻击、入侵和操纵的漏洞。关于信息责任，需要检验的关键假设是，如果人们认为他们的不遵守会被注意到，他们更有可能遵守规则(社会或法律)。问责系统的成功研究和开发最终将使真正的个人、社区和机构能够利用信息问责作为实现更好隐私和遵守其他信息使用规则的一种手段。

The project on the Theory and Practice of Accountable Systems investigates computational and social properties of information networks necessary to provide reliable assessments of compliance with rules and policies governing the use of information. In prior research, project leaders have demonstrated that achieving basic social policy goals in open information networks will require increased reliance on information accountability through after-the- fact detection of rule violations. This approach stands in contrast to the traditional mechanisms of policy compliance in network environments that rely on security technology to enforce rules by denial of access to resources at risk of abuse. So, access-based systems must be supplemented with accountability-based systems. To ensure that accountable systems can provide a stable, reliable, trustworthy basis on which to ground social policy arrangements in the future, it is necessary: 1) to research practical engineering approaches to designing these systems at scale, and 2) to develop a theory of the operating dynamics of accountable systems in order to establish what types of accountability assessments can be made, when those assertions are reliable, and what vulnerabilities accountable systems may have to attack, intrusion and manipulation. The key hypothesis to be tested regarding Information Accountability is that people are more likely to comply with rules (social or legal) if they believe that their non-compliance will be noticed. Successful study and development of accountable systems will ultimately enable real people, communities and institutions to take advantage of Information Accountability as a means of achieving better privacy and compliance with other information usage rules.