TC:Small:Informing Users of Their Privacy in Practice

该项目建议告知计算机用户他们在实践中获得的隐私。为此，该项目将记录膝上型计算机和台式计算机使用时的网络和系统测量结果。然后，它将分析这些测量结果，以发现哪些个人信息暴露给了谁以及哪些应用程序。这将在真实的用户承担真实的任务以产生个人隐私评估时完成。该项目将开发视觉表示，以向用户传达测量的信息暴露，作为特定隐私问题的答案，例如，“星巴克知道我什么？”“我们会进行使用者研究，以评估以量度所得的资讯暴露量来表示是否能有效地传达私隐风险，以及这些资讯暴露量如何影响使用者的行为。这项研究的动机是，使用个人电脑的人对他们所使用的应用程序如何在互联网上传播他们的个人资料知之甚少。”用户必须简单地假设有信誉的应用程序保护他们的隐私利益;他们没有做出明智的隐私决策的基础。这项研究旨在为用户提供他们缺乏的可见性。它将通过测量应用程序行为并使用简单的表示报告结果，向他们展示他们的个人信息实际上是如何传播的。其目的是为非技术用户提供一个强大的工具，帮助他们平衡他们的隐私需求与可用的应用程序。这项研究的长期影响旨在通过突出现实世界的隐私问题和机会来鼓励新的隐私增强技术。

This project proposes to inform computer users of the privacy that they receive in practice. To do so, the project will record network and system measurements of laptop and desktop computers as they are used. It will then analyze those measurements to discover what personal information is exposed to whom and by which applications. This will be done as real users undertake real tasks to produce individual privacy assessments. The project will develop visual representations to convey measured information exposure to users as answers to specific privacy questions, e.g., "What does Starbucks know about me?" User studies will be run to evaluate whether representations of measured information exposure are an effective way to convey privacy risks and how they affect user behavior.This research is motivated by the fact that people who use personal computers have little idea of how the applications they run spread their personal information over the Internet. Users must simply assume that reputable applications safeguard their privacy interests; they have no basis on which to make informed privacy decisions. The research seeks to provide users with the visibility that they lack. It will show them how their personal information is actually spread by measuring application behavior and reporting the results with simple representations. The intent is to provide non-technical users with a powerful tool to help them balance their privacy needs with the available applications. The long-term impact of this research is intended to encourage new privacy-enhancing technologies by highlighting real-world privacy problems and opportunities.