SaTC: CORE: Small: Corporeal Cybersecurity: Improving End-User Security and Privacy with Physicalized Computing Interface

鼓励支持网络安全和隐私的行为(S&P；P)仍然是一个持续存在的重要社会挑战。事实上，2018年，McAfee估计，网络犯罪造成的全球经济损失为6000亿美元，所有互联网用户中有多达三分之二的人受到个人数据泄露的影响。此外，这些违规行为中的许多都是人为错误的结果。之前在可用隐私和安全方面的研究发现了三个障碍，这有助于解释为什么支持S的行为仍然很少：意识、动机和能力。这项提议的主要假设是，应该有可能通过创建有形的安全和隐私接口(CSPI)来解决这些阻碍支持S的行为的问题，这些接口允许人们利用他们的有形威胁感知(例如，直观地理解在灯光昏暗的区域行走不如在光线充足的区域行走)，以及他们对基于物理世界的物理提供的自然理解(例如，通过窃窃私语缩小能听到S声音的人的范围)。为了验证这一假设，本项目建议设计、实施和评估三种新的CSPI。首先，比特语者是一种无线通信协议，它将数字通信放置在物理表面上，以提高人们对其无线通信的受众和威胁的认识。其次，蜘蛛感是一款智能腕带，可以提供情感触觉反馈，以激发对S&P；警告的更高反应。第三，魂器是一种有形的智能垫子，它提高了人们协作编写集体拥有和共享的数字资源的访问控制策略的能力。这项研究如果成功，将极大地促进支持S的行为的广泛采用，并反过来减轻人为错误造成的漏洞。这项提议将有形、可穿戴和触觉计算的想法与终端用户网络安全和隐私方面的挑战结合在一起。拟议中的工作将包括一些首次尝试，旨在整合最先进的有形互动技术，旨在通过提出以下研究问题来解决支持S的行为的意识、能力和动机障碍：(A)定位数字通信如何提高人们对其无线通信范围及其威胁的认识？(B)情感触觉如何提高终端用户对S和宝洁警告做出回应的动机？(C)有形用户界面如何提高社会团体协作编写共享账户和资源的访问控制政策的能力？在探索这些问题时，这项研究将做出以下高水平的智力贡献：(I)三个CSPI-比特语者、蜘蛛感和魂器的迭代设计和实现；(Ii)严格的实证研究，其中我们将探索这些CSPI在解决支持S的行为的意识、动机和能力障碍方面的有效性；以及(Iii)在可用的S&P的背景下，CSPI的一套综合的设计机会和挑战。本项目的成果将作为HCI、S和AMP学者之间新的跨学科合作的基础；这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Encouraging pro-cybersecurity and privacy (S&P) behaviors remains a persistently important societal challenge. Indeed, in 2018, McAfee estimated that the global economic damages caused by cybercrime was 600 billion USD, with as many as 2/3rds of all Internet users having been affected by personal data breaches. Moreover, many of these breaches were the result of human error. Prior work in usable privacy and security has identified three barriers that help explain why pro-S&P behaviors remain rare: awareness, motivation and ability. The overarching hypothesis of this proposal is that it should be possible to address these barriers to pro-S&P behaviors by creating corporeal security and privacy interfaces (CSPIs) that allow people to take advantage of their corporeal threat perception (e.g., intuitively understanding that walking in a dimly lit area is less safe than walking in a well-lit area) and their natural understanding of the physics-based affordances of the physical world (e.g., whispering to reduce the range of who can hear one’s voice) in digital S&P-relevant contexts. To test this hypothesis, this project proposes to design, implement and evaluate three novel CSPIs. First, Bit Whisperer is a wireless communication protocol that situates digital communications on physical surfaces to raise people’s awareness of the audience of and threats to their wireless communications. Second, Spidey Sense is a smartwatch wristband that delivers affective haptic feedback to motivate heightened responses to S&P warnings. Third, Horcrux is a tangible smart mat that improves people’s ability to collaboratively author access control policies for collectively owned and shared digital resources. This research, if successful, could significantly improve the widespread adoption of pro-S&P behaviors and, in turn, mitigate vulnerabilities that result from human error.This proposal marries ideas from tangible, wearable, and haptic computing with challenges in end-user cybersecurity and privacy. The proposed work will encompass some of the first attempts to integrate state-of-the-art tangible interaction techniques designed to address the awareness, ability and motivation barriers to pro-S&P behaviors, by asking research questions such as: (a) How might situated digital communications improve people’s awareness of the range of their wireless communications and the threats thereof? (b) How might affective haptics improve end-users’ motivation to respond to S&P warnings? (c) How might tangible user interfaces improve the ability of social groups to collaboratively author access control policies for shared accounts and resources? In exploring these questions, the research will make the following high-level intellectual contributions: (i) the iterative design and implementation of three CSPIs---Bit Whisperer, Spidey Sense and Horcrux; (ii) rigorous empirical studies in which we will explore the effectiveness of these CSPIs in addressing the awareness, motivation and ability barriers to pro-S&P behaviors; and (iii) a synthesized set of design opportunities and challenges for CSPIs in the context of usable S&P. The outputs of this project will serve as a foundation for a new cross-disciplinary collaboration between scholars in the HCI, S&P and Tangible Computing communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.