SBES: Small: Developing Countermeasures to Mitigate Psychology Cyber-Attacks on Personal Identity Information

每年大约有600万美国人成为身份盗窃的目标。许多对身份隐私的攻击使用心理影响策略（“心理攻击？”）来诱使个人提供他们的私人信息。尽管人们对自己的隐私有适当的关注，但他们经常不必要地披露可能被用来对自己不利的信息。我们的研究表明，人们？S的隐私暴露行为可能受到心理攻击的严重影响。不幸的是，从心理学角度减轻攻击的研究很少。本研究确定了针对隐私的心理网络攻击子集的警告的关键方面，并为开发针对其他类型心理网络攻击的有效缓解措施提供了指导方针。我们创造了以计算机为媒介的对策。我们还确定了警告在多大程度上引起注意，被理解，被记忆，增加对风险的感知，降低信任，并导致心理攻击条件下的依从性。知识价值。本研究首次探讨了用于减少危险行为（例如，健康相关行为）的理论模型是否可以扩展到计算机隐私领域。这项研究确定了警告是否会对人们产生重大影响？关于披露他们的私人信息的决定。我们在手持设备和网站上测试了缓解方法的有效性，目的是提高对警告的遵守程度。更广泛的影响。本研究提供了隐私信息暴露的缓解策略，并为软件开发人员在设计隐私保护软件时提供了指导方针。潜在地，研究结果可以推广到减轻其他当前和未来的心理隐私攻击。研究结果在社会心理学和计算机科学中传播。此外，我们还建立了一个网站，分享研究成果、数据集和经验教训，以提高保护身份信息和减轻心理网络攻击的重要性的意识。

Approximately six million Americans are targets of identity theft each year. Many of the attacks on identity privacy use psychological influence strategies ("psychological attacks?) to induce individuals to provide their private information. Although people are appropriately concerned about their privacy, they often unnecessarily disclose information that could be used to their disadvantage. Our studies have shown that people?s privacy exposure behaviors may be severely affected by psychological attacks. Unfortunately, research from a psychological perspective to mitigate the attacks is scarce. This research identifies critical aspects of warnings for a sub-set of psychological cyber-attacks on privacy and provides guidelines for developing effective mitigations against other types of psychological cyber-attacks. We create computer-mediated countermeasures. We also ascertain the extent to which the warnings capture attention, are understood, are memorable, increase perceptions of risk, decrease trust, and lead to compliance under conditions of psychological attacks. Intellectual Merit. This research is a first investigation of whether theoretical models developed to reduce risky behaviors (e.g., health-related behaviors) can be extended to the domain of computer privacy. The research determines whether warnings can have significant impact on people?s decisions about disclosure of their private information. The effectiveness of our mitigation approach is tested on hand-held devices and web sites with the goal of increasing compliance with the warnings. Broader Impacts. This research provides mitigation strategies for private information exposure and provides guidelines for software developers to use when designing privacy preserving software. Potentially, the results can be generalized to mitigate other current and future psychological privacy attacks. Research findings are disseminated in both social psychology and computer science. In addition, a website is developed to share the research results, the data sets, and the lessons learned, in order to raise the awareness of the importance of protecting identity information and mitigating psychological cyber-attacks.