SBES: Small: Developing Countermeasures to Mitigate Psychology Cyber-Attacks on Personal Identity Information

每年约有600万美国人成为身份被盗的目标。许多针对身份隐私的攻击都使用了心理影响策略(“心理攻击？”)诱使个人提供他们的私人信息。尽管人们适当地关注自己的隐私，但他们经常不必要地泄露可能对他们不利的信息。我们的研究表明，人们？S的隐私暴露行为可能会受到心理攻击的严重影响。不幸的是，从心理学角度来缓解攻击的研究很少。这项研究确定了针对针对隐私的心理网络攻击的子集的警告的关键方面，并为制定针对其他类型的心理网络攻击的有效缓解提供了指导方针。我们创造了以计算机为媒介的对策。我们还确定这些警告在多大程度上吸引了人们的注意，被理解，令人难忘，增加了对风险的感知，减少了信任，并在心理攻击的情况下导致了遵守。智力上的功绩。这项研究是关于为减少危险行为(例如，与健康相关的行为)而开发的理论模型是否可以扩展到计算机隐私领域的首次调查。这项研究决定了警告是否会对人们产生重大影响？S决定是否披露他们的私人信息。我们在手持设备和网站上测试了我们缓解方法的有效性，目的是提高对警告的遵从性。更广泛的影响。本研究提供了隐私信息暴露的缓解策略，并为软件开发人员在设计隐私保护软件时提供了指导原则。潜在地，这一结果可以推广到减轻其他当前和未来的心理隐私攻击。研究成果在社会心理学和计算机科学中都有传播。此外，还开发了一个网站，以分享研究结果、数据集和经验教训，以提高对保护身份信息和减轻心理网络攻击重要性的认识。

Approximately six million Americans are targets of identity theft each year. Many of the attacks on identity privacy use psychological influence strategies ("psychological attacks?) to induce individuals to provide their private information. Although people are appropriately concerned about their privacy, they often unnecessarily disclose information that could be used to their disadvantage. Our studies have shown that people?s privacy exposure behaviors may be severely affected by psychological attacks. Unfortunately, research from a psychological perspective to mitigate the attacks is scarce. This research identifies critical aspects of warnings for a sub-set of psychological cyber-attacks on privacy and provides guidelines for developing effective mitigations against other types of psychological cyber-attacks. We create computer-mediated countermeasures. We also ascertain the extent to which the warnings capture attention, are understood, are memorable, increase perceptions of risk, decrease trust, and lead to compliance under conditions of psychological attacks. Intellectual Merit. This research is a first investigation of whether theoretical models developed to reduce risky behaviors (e.g., health-related behaviors) can be extended to the domain of computer privacy. The research determines whether warnings can have significant impact on people?s decisions about disclosure of their private information. The effectiveness of our mitigation approach is tested on hand-held devices and web sites with the goal of increasing compliance with the warnings. Broader Impacts. This research provides mitigation strategies for private information exposure and provides guidelines for software developers to use when designing privacy preserving software. Potentially, the results can be generalized to mitigate other current and future psychological privacy attacks. Research findings are disseminated in both social psychology and computer science. In addition, a website is developed to share the research results, the data sets, and the lessons learned, in order to raise the awareness of the importance of protecting identity information and mitigating psychological cyber-attacks.