CRII: SaTC: RUI: Understanding and Addressing the Security and Privacy Needs of At-Risk Populations

科技和互联网越来越多地参与到我们的个人和公共生活中，为人们提供了许多好处，但也给我们的隐私带来了风险。少数群体和边缘群体在使用技术时尤其受益于信息、社区和社会参与。然而，他们也处于更危险的境地。他们更有可能成为攻击目标，而且保护自己的资源可能更少。技术可能不是为他们的需要而设计的。当这些群体的个人生活被曝光，在某些情况下，他们在网上与许多人交流时，他们面临的风险尤其大。他们可能会面临各种不寻常的安全和隐私问题，包括他们的离线身份暴露，有针对性的骚扰或跟踪，以及可用性故障，例如在与使用异常行为（例如使用假名）作为怀疑启发式的安全系统交互时帐户锁定。这个项目将研究那些可能有风险的人如何使用技术，以及他们遇到的安全和隐私危险。它的目标是创造新技术，更好地满足我们社会中所有人的需求。这个项目调查了人们的个人生活是如何在网上受到损害的，以及他们面临的计算机安全和隐私挑战。该项目使用调查和访谈，并根据这些数据的结果设计系统。贡献将包括制定包容性设计准则和将这些准则推广到边缘群体，创建新系统以应对这些群体面临的问题，以及评价这些系统在支持用户现实世界需求方面的有效性。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Technology and the internet are increasingly involved in our personal as well as public lives, providing people with many benefits, but also creating risks to our privacy. Minority and marginalized groups especially benefit from information, community, and social engagement when they use technology. However, they are also in more danger. They are more likely to be targeted, and may have fewer resources to protect themselves. Technology may not be designed for their needs. Such groups are especially at risk when their personal lives are revealed and, in some cases, communicated to many online. They can face a variety of unusual security and privacy concerns, including the revelation of their offline identity, targeted harassment or doxing, and usability failures such as account lockout when interacting with security systems that use abnormal behavior (such as the use of pseudonyms) as heuristics for suspicion. This project will study how people who may be at risk use technology and what security and privacy dangers they experience. It has the goal to create new technology that better meets the needs of all people in our society. This project investigates how people's personal lives can be compromised online and what computer security and privacy challenges they have. The project uses surveys and interviews, and designs systems informed by the results of those data. Contributions will include the development of guidelines for inclusive design and the generalization of those guidelines to marginalized groups, the creation of new systems responding to problems faced by these groups, and the evaluation of the effectiveness of these systems for supporting users' real world needs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.