EAGER: By the People, For the People: Community Ratings for App Privacy

应用程序存储使用复杂的用户界面来帮助用户理解应用程序所寻求的权限。不幸的是，这些界面很复杂，可能无法实现帮助用户知情同意的目标。因此，用户可能会在无意中泄露私人信息或使自己暴露于安全攻击之下。这个项目解决的问题是改进这些接口提供的信息的性质。它既关注将更好地表示这些信息的新界面设计，也关注引导提供这些信息的技术。在用户界面方面，它设计了新的界面，帮助未经训练的用户认识到所寻求的权限的安全和隐私后果。为了填充这些信息，它假定使用众包来获得有关许可适用性的大规模信息。我们的目标是最终用这些信息填充应用程序商店，以鼓励采用和用户的额外反馈。该项目将研究如何有效和准确地利用众包来收集这些信息。

Application stores use sophisticated user interfaces to help users understand the permissions sought by applications. Unfortunately, these interfaces are complex and may fail to address their goal of helping users give informed consent. As a result, users may inadvertently surrender private information or open themselves up to security attacks.This project tackles the problem of improving the nature of information provided by these interfaces. It focuses both on new interface designs that will better represent this information, and on techniques to bootstrap the provision of that information. On the user interface side, it designs new interfaces that help untrained users recognize the security and privacy consequences of the sought permissions. To populate this information, it posits the use of crowdsourcing to obtain information at scale about the suitability of permissions. The goal is to eventually populate an application store with this information to encourage adoption and additional feedback from users. The project will study how effectively and accurately crowdsourcing can be used to gather this information.