Evaluating the Impact of Community Oversight for Managing Mobile Privacy and Security
Evaluating the Impact of Community Oversight for Managing Mobile Privacy and Security
复制标题
DOI：
10.48550/arxiv.2306.02289
复制
发表时间：
2023-06
期刊：
影响因子：
--
通讯作者：
Mamtaj Akter;Madiha Tabassum;Md. Nazmus Sakib Miazi;Leen A. Alghamdi;Jessica Kropczynski;P. Wisniewski;H. Lipford
中科院分区：
文献类型：
--
作者：
Mamtaj Akter;Madiha Tabassum;Md. Nazmus Sakib Miazi;Leen A. Alghamdi;Jessica Kropczynski;P. Wisniewski;H. Lipford
移动隐私和安全可以是一个协作过程，个人向其信任的社区寻求建议和帮助。为了支持这种集体隐私和安全管理，我们开发了一款用于隐私和安全社区监督（“CO-oPS”）的移动应用程序，允许社区成员查看彼此安装的应用程序以及授予提供反馈的权限。我们对 22 个社区（101 名参与者）进行了为期 4 周的实地研究，这些社区的朋友、家人或同事在手机上安装了 CO-oPS 应用程序。从研究前到研究后，透明度、信任度和对彼此移动隐私和安全行为的认识以及个人和社区对移动隐私和安全共同管理的参与度都有所提高。采访结果证实，应用程序功能支持对应用程序和权限的集体考虑。然而，参与者对社区成员在移动隐私和安全方面拥有不同水平的技术专长和知识表示了一系列担忧，这可能会影响参与和执行监督的动机。我们的研究展示了社区监督机制在支持社区共同管理移动隐私和安全方面的潜力和挑战。
Mobile privacy and security can be a collaborative process where individuals seek advice and help from their trusted communities. To support such collective privacy and security management, we developed a mobile app for Community Oversight of Privacy and Security ("CO-oPS") that allows community members to review one another's apps installed and permissions granted to provide feedback. We conducted a four-week-long field study with 22 communities (101 participants) of friends, families, or co-workers who installed the CO-oPS app on their phones. Measures of transparency, trust, and awareness of one another's mobile privacy and security behaviors, along with individual and community participation in mobile privacy and security co-management, increased from pre- to post-study. Interview findings confirmed that the app features supported collective considerations of apps and permissions. However, participants expressed a range of concerns regarding having community members with different levels of technical expertise and knowledge regarding mobile privacy and security that can impact motivation to participate and perform oversight. Our study demonstrates the potential and challenges of community oversight mechanisms to support communities to co-manage mobile privacy and security.