CCE STEM: Standard: Collaborative Research: The Development of Ethical Cultures in Computer Security Research

CCE STEM：标准：协作研究：计算机安全研究中道德文化的发展

• 批准号: 1634202
• 负责人: Megan Finn
• 金额: $ 33.61万
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1634202&HistoricalAwards=false
• 关键词: CCE; STEM; Standard; Collaborative; Research

Computer security researchers prevent, discover, and fix flaws in devices and cyberinfrastructures, thereby impacting national security, business practices, information privacy, and personal safety. However, these researchers must also navigate ethical dilemmas about how to use big data and shared networked resources to discover vulnerabilities; how to safely expose these problems; and how to best ensure that critical vulnerabilities are fixed. This proposed research will analyze the scholarly discourse and private reflections of computer security researchers over time. The goal is to reveal insights about how people, changes in technology, and changes in research practices shaped ethical cultures in security research and how ethics shaped research practice. Through this analysis of a technical research community, the proposed research will demonstrate how an ethical culture was developed and sustained in order to explore the limits of ethical self-regulation. It will identify the strengths and weaknesses of ethics self-regulation and draw upon ethical practices within computer security to inform other computing research communities. Project outcomes will contribute to ethics pedagogy for information and computing researchers and develop case studies for use by students and practitioners that demonstrate best practices for self-regulation.The proposed research will utilize multiple methods, including citation analysis, content analysis, and interviews, to illuminate and evaluate the ethical culture of computer security research. The project asks four questions: R1) How has the computer security community formed an ethical research culture? R2) How are ethics expectations communicated among researchers? R3) What sociotechnical factors support and challenge sustaining ethical practices? R4) How effective is ethical self-regulation in computer security research? The research will be conducted in four phases. Phase I will examine the development of ethics controversies and community responses through an analysis of key ethics moments in the last twenty years of computer security research through citation and discourse analysis. Phase II will interview diverse computer security researchers identified by the citation and discourse analysis to trace how the community developed and changed its approach to ethics over time. Phase III will conduct a stakeholder assessment of the strengths and weaknesses of ethical self-regulation in computer security research. Phase IV will create and evaluate educational case studies based on the empirical findings for students, as well as policy recommendations for conference review committees and researchers struggling to identify best practices for ethical computer security research.

计算机安全研究人员预防，发现和修复设备和网络基础设施中的缺陷，从而影响国家安全，商业惯例，信息隐私和人身安全。 然而，这些研究人员还必须解决以下伦理困境：如何使用大数据和共享网络资源来发现漏洞;如何安全地暴露这些问题;以及如何最好地确保修复关键漏洞。 这项拟议的研究将分析计算机安全研究人员随着时间的推移的学术话语和私人反思。我们的目标是揭示人们，技术的变化和研究实践的变化如何塑造安全研究中的道德文化以及道德如何塑造研究实践的见解。 通过对技术研究社区的分析，拟议的研究将展示道德文化是如何发展和维持的，以探索道德自律的局限性。 它将确定道德自律的优势和劣势，并借鉴计算机安全领域的道德实践，以告知其他计算研究社区。 项目成果将有助于信息和计算研究人员的伦理教育，并开发案例研究，供学生和从业人员使用，展示自我监管的最佳实践。拟议的研究将利用多种方法，包括引文分析，内容分析和访谈，以阐明和评估计算机安全研究的伦理文化。 该项目提出了四个问题：R1）计算机安全社区如何形成一种道德研究文化？R2）研究人员之间如何沟通伦理期望？R3）哪些社会技术因素支持和挑战可持续的道德实践？R4）计算机安全研究中的道德自律有多有效？研究将分四个阶段进行。 第一阶段将通过引用和话语分析来分析过去二十年计算机安全研究中的关键伦理时刻，研究伦理争议和社区反应的发展。 第二阶段将采访通过引文和话语分析确定的不同计算机安全研究人员，以追踪社区如何随着时间的推移发展和改变其道德方法。 第三阶段将对计算机安全研究中道德自律的优点和缺点进行评估。 第四阶段将根据学生的经验发现创建和评估教育案例研究，以及为会议审查委员会和努力确定伦理计算机安全研究最佳实践的研究人员提供政策建议。

项目成果

From closed world discourse to digital utopianism: the changing face of responsible computing at Computer Professionals for Social Responsibility (1981–1992)

从封闭世界话语到数字乌托邦主义：社会责任计算机专业人员中负责任计算的变化（1981 年至 1992 年）

• DOI: 10.1080/24701475.2020.1725851
• 发表时间: 2020
• 期刊: Internet Histories
• 影响因子: 1.3
• 作者: Finn, Megan;DuPont, Quinn
• 通讯作者: DuPont, Quinn

Leveraging Citation Networks to Visualize Scholarly Influence Over Time

• DOI: 10.3389/frma.2017.00008
• 发表时间: 2016-11
• 期刊: Frontiers Res. Metrics Anal.
• 作者: Jason Portenoy;J. Hullman;Jevin D. West

Values and Ethics in Human-Computer Interaction

人机交互中的价值观和道德规范

• DOI: 10.1561/1100000073
• 发表时间: 2018
• 期刊: Foundations and Trends® in Human–Computer Interaction
• 作者: Shilton, Katie

Visualizing Scholarly Publications and Citations to Enhance Author Profiles

可视化学术出版物和引文以增强作者简介

• DOI: 10.1145/3041021.3053058
• 发表时间: 2017
• 期刊: WWW '17 Companion Proceedings of the 26th International Conference on World Wide Web Companion
• 作者: Portenoy, Jason;West, Jevin D.
• 通讯作者: West, Jevin D.