TWC: Medium: Collaborative: Capturing People's Expectations of Privacy with Mobile Apps by Combining Automated Scanning and Crowdsourcing Techniques

我们工作的目标是（a）以可扩展的方式捕捉人们在使用移动的应用程序时的期望和惊喜，并（B）以简单的格式总结这些感知，以帮助人们做出更好的信任决策。我们的主要想法是以人们对应用程序会做什么和不会做什么的期望的形式来分析隐私，重点是应用程序在哪里打破了人们的期望。我们正在构建一个结合了自动扫描技术和众包的App Scanner。自动扫描捕获应用程序的行为，而众包用于解释这种行为的预期和可接受程度。这些信息被用作为应用程序构建更好的隐私摘要的基础。我们组织了一个跨学科的团队，他们在移动的计算、计算机安全、系统和人机交互方面具有专长。这项工作的成功将包括：（a）设计和实施应用程序扫描器，该扫描器将自动化技术与众包技术相结合，用于分析和解释移动的应用程序的隐私相关行为;（B）对该应用程序扫描器进行一系列评估，以显示有效性、准确性和可扩展性;（c）设计和评估更好的隐私摘要，优先考虑并突出应用程序最意想不到的行为;及（d）展示私隐的新概念，即私隐作为期望。成功还将帮助最终用户、企业和政府雇员比今天更好地管理他们的隐私。

The goal of our work is to (a) capture people's expectations and surprises in using mobile apps in a scalable manner, and to (b) summarize these perceptions in a simple format to help people make better trust decisions. Our main idea is analyzing privacy in the form of people's expectations about what an app will and won't do, focusing on where an app breaks people's expectations. We are building an App Scanner that combines automated scanning techniques with crowdsourcing. Automated scanning captures the behavior of an app, while crowdsourcing is used to interpret how expected and acceptable this behavior is. This information is used as the basis for building a better privacy summary for apps. We have organized an interdisciplinary team with expertise in mobile computing, computer security, systems, and human-computer interaction.Success in this work will include results in: (a) the design and implementation of an App Scanner that combines automated techniques with crowdsourcing techniques for analyzing and interpreting privacy-related behaviors of mobile apps; (b) a series of evaluations of this app scanner, showing effectiveness, accuracy, and scalability; (c) the design and evaluation of better privacy summaries, which prioritize and highlight the most unexpected behaviors of an app; and (d) demonstration of a new conceptualization of privacy, namely privacy as expectations. Success will also help end-users, corporate and government employees manage their privacy better than can be done today.