Designing improved privacy and security interfaces

可用的隐私和安全性，即人机交互（HCI）方法在隐私和安全应用中的应用，是一个重要的研究领域，因为用户错误可能代价高昂，例如导致恶意软件安装或无意泄露个人信息。如果最终用户不了解其行为中的安全风险以及如何配置旨在保护他们的安全工具，技术安全进步将不会成功。此外，最终用户安全对组织安全的影响越来越大，因为组织的安全边界不得不扩展到包括移动的设备，这些设备通常被员工用于个人和商业目的。 为了解决这些问题，我们必须在两个关键领域取得重大进展：首先，我们需要进一步调查最终用户如何感知安全和隐私风险，以及他们为各种工具如何协同工作以保护他们而开发的心理模型;第二，我们必须利用这些知识来设计和实现改进的用户界面，以鼓励开发适当的心理模型，并促进安全行为，在个人和组织背景下。 我的研究项目调查了两个主要主题，以提高隐私和安全界面的可用性。第一个主题将集中于如何提高个人防火墙等安全工具的可用性，以及更通用的工具，如网络浏览器，这些工具每天都会使用户面临安全和隐私风险。 第二个主题将调查协作过程中的安全和隐私问题（包括个人和组织）。该研究计划将在可用的隐私和安全，界面设计，最终用户配置管理和信息技术管理等领域做出贡献。

Usable privacy and security, that is the application of human-computer interaction (HCI) methods to privacy and security applications, is an important research area as user errors can be costly, such as when resulting in malware installation or unintentional disclosure of personal information. Technical security advances will not succeed if end users do not understand the security risks in their behaviours and how to configure the security tools designed to protect them. Furthermore, end user security has increasingly impacted organizational security as the security perimeter of organizations has had to expand to include mobile devices, which are often used by employees for personal as well as business purposes. In order to solve these problems, we must make significant advances in two key areas: first, we need to investigate further how end users perceive security and privacy risks and the mental models they have developed for how the various tools work together to protect them; and second, we have to use this knowledge to design and implement improved user interfaces that encourage the development of appropriate mental models and promote safe behaviours, in both personal and organizational contexts. My research program investigates two main themes in improving the usability of privacy and security interfaces. The first theme will focus on how to improve the usability of security tools such as personal firewalls, as well as more general tools such as web browsers that expose users to security and privacy risks on a daily basis. The second theme will investigate security and privacy concerns during collaboration (both personal and organizational). This research program will make contribution in the areas of usable privacy and security, interface design, end-user configuration management, and the management of information technologies.