TC:Small:Informing Users of Their Privacy in Practice

TC:Small：在实践中告知用户他们的隐私

• 批准号: 0917341
• 负责人: David Wetherall
• 金额: $ 49.74万
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0917341&HistoricalAwards=false
• 关键词: TC; Small; Informing; Users; Their

This project proposes to inform computer users of the privacy that they receive in practice. To do so, the project will record network and system measurements of laptop and desktop computers as they are used. It will then analyze those measurements to discover what personal information is exposed to whom and by which applications. This will be done as real users undertake real tasks to produce individual privacy assessments. The project will develop visual representations to convey measured information exposure to users as answers to specific privacy questions, e.g., "What does Starbucks know about me?" User studies will be run to evaluate whether representations of measured information exposure are an effective way to convey privacy risks and how they affect user behavior.This research is motivated by the fact that people who use personal computers have little idea of how the applications they run spread their personal information over the Internet. Users must simply assume that reputable applications safeguard their privacy interests; they have no basis on which to make informed privacy decisions. The research seeks to provide users with the visibility that they lack. It will show them how their personal information is actually spread by measuring application behavior and reporting the results with simple representations. The intent is to provide non-technical users with a powerful tool to help them balance their privacy needs with the available applications. The long-term impact of this research is intended to encourage new privacy-enhancing technologies by highlighting real-world privacy problems and opportunities.

该项目旨在告知计算机用户他们在实践中所获得的隐私。为此，该项目将记录笔记本电脑和台式电脑在使用时的网络和系统测量结果。然后，它将分析这些测量结果，以发现哪些个人信息被哪些应用程序暴露给了谁。这将在真实用户承担真实任务以进行个人隐私评估时完成。该项目将开发视觉表示，向用户传达测量到的信息暴露，作为特定隐私问题的答案，例如“星巴克了解我什么？”将进行用户研究，以评估所测量的信息暴露的表示是否是传达隐私风险及其如何影响用户行为的有效方式。这项研究的动机是，使用个人计算机的人几乎不知道他们运行的应用程序如何在互联网上传播他们的个人信息。用户必须简单地假设信誉良好的应用程序会保护他们的隐私利益；他们没有依据做出明智的隐私决定。该研究旨在为用户提供他们所缺乏的可见性。它将通过测量应用程序行为并用简单的表示报告结果来向他们展示他们的个人信息实际上是如何传播的。目的是为非技术用户提供强大的工具，帮助他们平衡隐私需求与可用应用程序。这项研究的长期影响旨在通过强调现实世界的隐私问题和机遇来鼓励新的隐私增强技术。