SFB 1223: Methods and Tools for Understanding and Controlling Privacy

互联网已经成为一个全球多媒体平台，在这个平台上，数十亿用户越来越多地进行着他们生活中相当大的一部分。在这种情况下，终端用户的在线隐私在很大程度上是一个悬而未决的问题。在线数据的广泛流通性、易访问性和永久性导致了从公开尴尬到申请工作或保险时的不利因素等各种风险。新的商业模式已经出现，以前所未有的方式跟踪个人信息并将其货币化。立法者已经开始通过收紧隐私法规来回应，但我们可以说缺乏完全遵守这些法规的技术，用户也缺乏对做出明智的隐私选择的支持。建立提供在线隐私的总体科学基础是一项长期的努力，需要一项广泛涵盖两个中心研究领域的基础研究工作：了解隐私，即如何识别互联网中的隐私敏感信息并评估有害的隐私后果；以及控制隐私，即控制隐私。考虑到当今数字栖息地和新兴技术的动态，如何强制执行用户隐私要求。儿童权利委员会将为解决这些问题作出概念性和实实在在的贡献，例如，包括评估公共视觉数据潜在隐私威胁的图像分析方法、在复杂的移动传感和记录设备存在的情况下保护隐私的技术，以及在不抑制其功能的情况下在在线互动中保护用户S匿名的解决方案。三个工作组将促进对交叉主题的联合研究：作为不同类型隐私分析和执行之间互动基础的数据模型的全面框架；不同隐私概念的相互作用；以及促进我们解决方案可用性的方法框架。实现我们的目标远远超出了传统的安全和隐私研究。它需要将自上而下的研究方法与自下而上的研究方法结合起来，这些方法对于在开放世界和现有基础设施上理解隐私是必要的；而自下而上的研究方法对于控制隐私和彻底重塑基础设施是必要的，以便提供坚实的保障。它要求将广泛的计算机科学子领域(包括信息系统、计算机视觉和社交网络分析)的专业知识与经典的安全和隐私研究紧密结合起来，并推动它们的长期合作。参与的机构在应对这一挑战方面处于独特的地位。从长远来看，我们看到了对我们的研究界的巨大影响：一种范式转变，转向全面、整体的方法，跨越传统隐私研究和相邻领域之间的现有障碍。

The Internet has become a global multimedia platform in which billions of users increasingly conduct sizable parts of their lives. In this context, online privacy of end-users is a largely unsolved problem. The wide circulation, easy accessibility and permanent nature of online data incurs risks ranging from public embarrassment to disadvantages when applying for jobs or insurance. New business models have emerged, tracking and monetizing personal information in an unprecedented manner. Legislators have started to respond by tightening privacy regulations, but we arguably lack the technology to fully comply with such regulations, and users lack support for making informed privacy choices. Establishing an overarching scientific foundation for providing online privacy is a long-term endeavor, requiring a fundamental research effort broadly covering two central research areas: Understanding Privacy, i.e. how to identify privacy-sensitive information in the Internet and assess the detrimental privacy consequences; and Controlling Privacy, i.e.. how to enforce user privacy demands given the dynamics of present-day digital habitats and emerging technologies. The CRC will make conceptual and tangible contributions addressing these questions, including, for example, image analysis methods that assess the potential privacy threat of public visual data, techniques protecting privacy in the presence of sophisticated mobile sensing and recording devices, and solutions preserving a user¿s anonymity in online interactions without inhibiting their functionality. Three task forces will facilitate joint research on cross-cutting themes: a comprehensive framework for data models as a basis for the interaction between different kinds of privacy analysis and enforcement; the interplay of different privacy notions; and a methodological framework to foster the usability of our solutions.Achieving our goals goes far beyond traditional security and privacy research. It requires to combinetop-down research approaches, necessary to understand privacy in an open world and on existing infrastructures; with bottom-up research approaches that are necessary to control privacy and completely reshape infrastructures in order to provide firm guarantees. It requires to tightly integrate the expertise from, and drive the long-term collaboration of, a wide range of computer science subareas ¿ including, e.g., information systems, computer vision, and social networks analysis ¿ with classical security & privacy research. The participating institutions are in a unique position to tackle this challenge. On the long run, we see a great impact on our research community: a paradigm shift towards a comprehensive, holistic approach that surmounts existing barriers between traditional privacy research and adjacent areas.