SaTC: CORE: Small: Corporeal Cybersecurity: Improving End-User Security and Privacy with Physicalized Computing Interface

SaTC：核心：小型：实体网络安全：通过物理化计算接口提高最终用户安全和隐私

• 批准号: 2316294
• 负责人: Sauvik Das
• 金额: $ 49.99万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2316294&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Corporeal; Cybersecurity

Encouraging pro-cybersecurity and privacy (S&P) behaviors remains a persistently important societal challenge. Indeed, in 2018, McAfee estimated that the global economic damages caused by cybercrime was 600 billion USD, with as many as 2/3rds of all Internet users having been affected by personal data breaches. Moreover, many of these breaches were the result of human error. Prior work in usable privacy and security has identified three barriers that help explain why pro-S&P behaviors remain rare: awareness, motivation and ability. The overarching hypothesis of this proposal is that it should be possible to address these barriers to pro-S&P behaviors by creating corporeal security and privacy interfaces (CSPIs) that allow people to take advantage of their corporeal threat perception (e.g., intuitively understanding that walking in a dimly lit area is less safe than walking in a well-lit area) and their natural understanding of the physics-based affordances of the physical world (e.g., whispering to reduce the range of who can hear one’s voice) in digital S&P-relevant contexts. To test this hypothesis, this project proposes to design, implement and evaluate three novel CSPIs. First, Bit Whisperer is a wireless communication protocol that situates digital communications on physical surfaces to raise people’s awareness of the audience of and threats to their wireless communications. Second, Spidey Sense is a smartwatch wristband that delivers affective haptic feedback to motivate heightened responses to S&P warnings. Third, Horcrux is a tangible smart mat that improves people’s ability to collaboratively author access control policies for collectively owned and shared digital resources. This research, if successful, could significantly improve the widespread adoption of pro-S&P behaviors and, in turn, mitigate vulnerabilities that result from human error.This proposal marries ideas from tangible, wearable, and haptic computing with challenges in end-user cybersecurity and privacy. The proposed work will encompass some of the first attempts to integrate state-of-the-art tangible interaction techniques designed to address the awareness, ability and motivation barriers to pro-S&P behaviors, by asking research questions such as: (a) How might situated digital communications improve people’s awareness of the range of their wireless communications and the threats thereof? (b) How might affective haptics improve end-users’ motivation to respond to S&P warnings? (c) How might tangible user interfaces improve the ability of social groups to collaboratively author access control policies for shared accounts and resources? In exploring these questions, the research will make the following high-level intellectual contributions: (i) the iterative design and implementation of three CSPIs---Bit Whisperer, Spidey Sense and Horcrux; (ii) rigorous empirical studies in which we will explore the effectiveness of these CSPIs in addressing the awareness, motivation and ability barriers to pro-S&P behaviors; and (iii) a synthesized set of design opportunities and challenges for CSPIs in the context of usable S&P. The outputs of this project will serve as a foundation for a new cross-disciplinary collaboration between scholars in the HCI, S&P and Tangible Computing communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

鼓励支持网络安全和隐私（SP）的行为仍然是一个持续的重要社会挑战。2018年，McAfee估计网络犯罪造成的全球经济损失为6000亿美元，多达三分之二的互联网用户受到个人数据泄露的影响。此外，这些违规行为中有许多是人为错误造成的。之前在可用的隐私和安全方面的工作已经确定了三个障碍，有助于解释为什么亲S P行为仍然罕见：意识，动机和能力。该提案的首要假设是，应该可以通过创建允许人们利用他们的身体威胁感知（例如，直观地理解在昏暗的照明区域中行走不如在明亮的区域中行走安全）以及他们对物理世界的基于物理的启示的自然理解（例如，耳语，以减少谁可以听到一个人的声音的范围）。为了验证这一假设，本项目提出了设计，实施和评估三个新的CSPI。 首先，Bit Whisperer是一种无线通信协议，它将数字通信置于物理表面上，以提高人们对无线通信的受众和威胁的认识。 其次，Spidey Sense是一款智能手表腕带，可提供情感触觉反馈，以激发对SP警告的高度反应。 第三，魂器是一个有形的智能垫，提高了人们的能力，以协作的方式为集体拥有和共享的数字资源编写访问控制策略。这项研究，如果成功的话，可以显着提高亲S P行为的广泛采用，反过来，减轻漏洞，导致人为错误。这个建议结婚的想法，从有形的，可穿戴的，触觉计算的挑战，最终用户的网络安全和隐私。拟议的工作将包括一些第一次尝试整合国家的最先进的有形的互动技术，旨在解决的认识，能力和动机障碍亲S P的行为，通过询问研究问题，如：（一）如何可能位于数字通信提高人们的意识，他们的无线通信的范围和威胁？(b)情感触觉如何提高最终用户对S P警告做出反应的动机？(c)有形的用户界面如何提高社交团体协作创建共享帐户和资源的访问控制策略的能力？在探索这些问题的过程中，该研究将做出以下高水平的智力贡献：（i）三个CSPI的迭代设计和实现-比特耳语者，蜘蛛侠感觉和魂器;（ii）严格的实证研究，我们将探索这些CSPI在解决亲S P行为的意识，动机和能力障碍方面的有效性&;以及（iii）在可用S P的背景下为CSPI设计一组综合的机会和挑战&。这个项目的成果将作为HCI，S P和Tibet计算社区学者之间新的跨学科合作的基础&。这个奖项反映了NSF的法定使命并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Powering for Privacy: Improving User Trust in Smart Speaker Microphones with Intentional Powering and Perceptible Assurance

• 发表时间: 2023
• 作者: Youngwook Do;Nivedita Arora;Ali Mirzazadeh;Injoo Moon;Eryue Xu;Zhihan Zhang;G. Abowd;Sauvik Das