TWC: Medium: Collaborative: Studying Journalists to Identify Requirements for Usable, Secure, and Trustworthy Communication

这项研究的重点是了解记者及其消息来源的数字安全和隐私需求，以评估和设计更好地支持全球自由和不受约束的新闻的基本运作的通信技术。众所周知，记者及其组织和消息来源是网络攻击的高危目标。这个社区可以充当隐私和安全的领头羊，有使用新技术的动机，但需要灵活性和易用性。对于记者来说，许多现有的安全工具过于繁琐，无法定期使用。此外，这些工具可能缺乏重要的安全和隐私保护功能，这些功能不仅是作为新闻活动一部分的庞大而多样化的社区所需要的，也是其他个人和团体所需要的，这些个人和团体可能更难认识和表达自己的需求。通过了解新闻界的需求和制约因素，该项目将确定技术和培训干预措施，以改善记者及其接触的许多社区的日常安全和隐私。研究人员将对记者及其消息来源进行深入采访和可用性测试。所获得的见解将阐明他们在网络安全方面遇到的概念和技术问题。使用与这些人群相关的特定风险和资源模型，研究人员将针对通信元数据、数据管理、同步、搜索和权限控制以及可信分布式密钥服务器和“消失数据”的可能性等问题，提出、制作原型并开始评估新的技术解决方案。这项工作的结果将为今后的技术进步奠定基础，不仅供记者使用，而且供有意为其他社区实施和测试这些工具和程序的研究人员和组织使用。

This research focuses on understanding the digital security and privacy needs of journalists and their sources to evaluate and design communication technologies that better support the fundamental operations of a globally free and unfettered press. Journalists -- along with their organizations and sources -- are known to be high-risk targets for cyberattack. This community can serve as a privacy and security bellwether, motivated to use new technologies, but requiring flexibility and ease-of-use. Many existing secure tools are too cumbersome for journalists to use on a regular basis. Moreover, these tools may lack important security and privacy-protecting features that are needed not only by the large and diverse community that is part of journalistic activity, but by other individuals and groups that may have a harder time recognizing and articulating their needs. By learning about the needs and constraints of the journalism community, this project will identify both technical and training interventions that can improve the daily security and privacy of journalists, the many communities with which they interact. The researchers will perform in-depth interviews and usability tests with journalists and their sources. The insights gained will illuminate both the conceptual and technical issues they encounter with respect to cybersecurity. Using the specific risk- and resource-models relevant to these populations, the researchers will propose, prototype, and begin evaluating novel technical solutions to issues like communications metadata, as well as data management, syncing, search and permission controls, and the possibilities of trusted distributed key servers and "disappearing data." The results of this work will lay the groundwork for future technical advances, not only for journalists but also for use by researchers and organizations interested in implementing and testing these tools and processes for other communities.