SaTC: CORE: Small: Corporeal Cybersecurity: Improving End-User Security and Privacy with Physicalized Computing Interface

鼓励有利于网络安全和隐私（S&amp；P）的行为仍然是一个重要的社会挑战。事实上，据迈克菲估计，2018年网络犯罪给全球造成的经济损失高达6000亿美元，多达三分之二的互联网用户受到个人数据泄露的影响。此外，这些违规行为中有许多是人为错误造成的。先前在可用隐私和安全方面的工作已经确定了三个障碍，这有助于解释为什么支持标准普尔行为仍然很少：意识、动机和能力。该提案的首要假设是，应该有可能通过创建身体安全和隐私接口（cspi）来解决亲s&amp；P行为的这些障碍，该接口允许人们利用他们的身体威胁感知（例如，直观地理解在光线昏暗的区域行走比在光线充足的区域行走更不安全）和他们对物理世界基于物理的支持的自然理解(例如，窃窃私语以缩小别人能听到自己声音的范围)。为了验证这一假设，本项目提出设计、实施和评估三个新的cspi。首先，Bit Whisperer是一种无线通信协议，它将数字通信置于物理表面，以提高人们对无线通信受众和威胁的认识。其次，“蜘蛛感”是一款智能手表腕带，可以提供情感触觉反馈，以激发对标普警告的更高反应。第三，魂器是一个有形的智能垫子，它提高了人们协作为集体拥有和共享的数字资源编写访问控制策略的能力。这项研究如果成功的话，将显著地促进对标准普尔行为的广泛采用，进而减少人为错误造成的漏洞。该提案将有形、可穿戴和触觉计算的想法与终端用户网络安全和隐私方面的挑战结合起来。拟议的工作将包括一些首次尝试整合最先进的有形互动技术，旨在通过提出以下研究问题来解决亲s&amp；P行为的意识、能力和动机障碍：(a)位置数字通信如何提高人们对其无线通信范围及其威胁的认识？(b)情感触觉如何改善最终用户对S&amp；P警告作出反应的动机？(c)有形的用户界面如何提高社会群体协作制定共享帐户和资源的访问控制政策的能力？在探索这些问题的过程中，本研究将做出以下高层次的智力贡献：(i)三个cspi的迭代设计和实现——Bit Whisperer， spider Sense和Horcrux；（ii）严谨的实证研究，其中我们将探讨这些csp在解决亲标普行为的意识、动机和能力障碍方面的有效性；以及（iii）在可用的标准和程序设计背景下，cspi的综合设计机会和挑战。该项目的成果将作为HCI、s&p和有形计算社区学者之间新的跨学科合作的基础。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Encouraging pro-cybersecurity and privacy (S&P) behaviors remains a persistently important societal challenge. Indeed, in 2018, McAfee estimated that the global economic damages caused by cybercrime was 600 billion USD, with as many as 2/3rds of all Internet users having been affected by personal data breaches. Moreover, many of these breaches were the result of human error. Prior work in usable privacy and security has identified three barriers that help explain why pro-S&P behaviors remain rare: awareness, motivation and ability. The overarching hypothesis of this proposal is that it should be possible to address these barriers to pro-S&P behaviors by creating corporeal security and privacy interfaces (CSPIs) that allow people to take advantage of their corporeal threat perception (e.g., intuitively understanding that walking in a dimly lit area is less safe than walking in a well-lit area) and their natural understanding of the physics-based affordances of the physical world (e.g., whispering to reduce the range of who can hear one’s voice) in digital S&P-relevant contexts. To test this hypothesis, this project proposes to design, implement and evaluate three novel CSPIs. First, Bit Whisperer is a wireless communication protocol that situates digital communications on physical surfaces to raise people’s awareness of the audience of and threats to their wireless communications. Second, Spidey Sense is a smartwatch wristband that delivers affective haptic feedback to motivate heightened responses to S&P warnings. Third, Horcrux is a tangible smart mat that improves people’s ability to collaboratively author access control policies for collectively owned and shared digital resources. This research, if successful, could significantly improve the widespread adoption of pro-S&P behaviors and, in turn, mitigate vulnerabilities that result from human error.This proposal marries ideas from tangible, wearable, and haptic computing with challenges in end-user cybersecurity and privacy. The proposed work will encompass some of the first attempts to integrate state-of-the-art tangible interaction techniques designed to address the awareness, ability and motivation barriers to pro-S&P behaviors, by asking research questions such as: (a) How might situated digital communications improve people’s awareness of the range of their wireless communications and the threats thereof? (b) How might affective haptics improve end-users’ motivation to respond to S&P warnings? (c) How might tangible user interfaces improve the ability of social groups to collaboratively author access control policies for shared accounts and resources? In exploring these questions, the research will make the following high-level intellectual contributions: (i) the iterative design and implementation of three CSPIs---Bit Whisperer, Spidey Sense and Horcrux; (ii) rigorous empirical studies in which we will explore the effectiveness of these CSPIs in addressing the awareness, motivation and ability barriers to pro-S&P behaviors; and (iii) a synthesized set of design opportunities and challenges for CSPIs in the context of usable S&P. The outputs of this project will serve as a foundation for a new cross-disciplinary collaboration between scholars in the HCI, S&P and Tangible Computing communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.