Cylab News

Print

NSF Awards Grant for Privacy Study to CyLab Researchers Acquisti, Cranor and Sadeh

"Nudging Users Toward Privacy" is an ambitious, multi-disciplinary effort, that is focused on three exemplary application domains, and builds on the complementary skills and expertise of these three CyLab researchers, extending their research in a novel direction.

The National Science Foundation (NSF) has granted $2.7 million to three leading CyLab researchers for a five-year study on "Nudging Users Toward Privacy."

Alessandro Acquisti, principle investigator, along with Lorrie Cranor and Norman Sadeh, will study, design, and test systems that anticipate, and sometimes even exploit, cognitive and behavioral biases that hamper users’ privacy and security decision making. They aim to develop a scientific body of knowledge, and empirically test the design of privacy technologies that nudge users without restricting their choices.

This NSF-funded work will include conducting foundational studies to understand user privacy needs, preferences, and behaviors; developing "nudging" technologies to support and ameliorate privacy decision-making in these domains; and evaluating the effectiveness of these technologies in countering users’ biases and increasing their overall welfare and satisfaction. The study will introduce a novel approach to the design of privacy technologies and policies, leveraging both ongoing work on usable privacy and security and lessons from behavioral decision research and, in particular, soft paternalism.

"Nudging Users Toward Privacy" is an ambitious, multi-disciplinary effort, which is focused on three exemplary application domains and builds on the complementary skills and expertise of these three CyLab researchers, extending their research in a novel direction.

Looking toward the potential impact of the research, Acquisti, Cranor and Sadeh see several benefits:

"Helping users avoid mistakes, decrease regret, and achieve more rapidly the desired balance between sharing and protecting personal information in these areas has clear, and significant, societal importance. However, our research also aims at advancing the scientific understanding of what makes privacy decision making difficult, what influences user behavior on this area, and how to build systems that influence that behavior in a desirable manner. Therefore, our results can inform the work of privacy and security technologists, providing insights and methods that go beyond better interfaces to revisit the strategies and assumptions underlying those systems. In addition, by exposing conditions under which technology alone may not be sufficient to assist human decision-making, this research can actively inform the work of policy makers. Finally, our approach can be straightforwardly extended to the field of information security, since security decisions, at the individual and corporate levels, are affected by biases similar to those that affect privacy decision making."

Some Related Posts:

CyLab Chronicles Q & A with Lorrie Cranor (2010)

Cups Wins Google Focused Research Award

Video of CyLab's Alessandro Acquisti on "the Dish: it's all in the numbers - privacy, math and social security" at Koshland Museum

There is an Elephant in the Room, & Everyone's Social Security Numbers are Written on Its Hide

CyLab Seminar Series Notes: User-Controllable Security and Privacy -- Norman Sadeh Asks, "Are Expectations Realistic?"

CyLab in the headlines

CMU professor tells Congress Social Security IT should embrace the cloud - May 10, 2012
"In the 30 years since many of the existing (Social Security Administration) systems were first stood up, storage capacities, network bandwidth, processing power, and the cost of these things have all improved by between 4 and 6 orders of magnitude," Carnegie Mellon CyLab researcher William Scherlis said in written testimony. "That’s a factor of a million. If skyscrapers increased in height by that factor, they would scrape the moon."

The Post-Cash, Post-Credit-Card Economy - April 28, 2012
Alessandro Acquisti, a researcher at Carnegie Mellon CyLab smiled. If today all you need to do is enter your phone number and PIN when you visit a store, perhaps tomorrow, he said, that store will be able to detect your phone by its unique identifier as soon as you enter. Perhaps in the not-too-distant future, he went on, you won’t have to shop at all. Your vast piles of shopping data would be instead collected, analyzed and used to tell you exactly what you need: a new motorcycle from Ducati, perhaps, or purple rain boots in the next size for your growing child. Money will be seamlessly taken from your account. A delivery will arrive at your doorstep.

Big Mac Attack: Apple Security Bruised after OS X Infections - April 25, 2012
"In the computer community we've been saying for five, six, seven years that Mac is not more immune to computer viruses than Windows PCs or even Linux boxes, " says Nicolas Christin, researcher at Carnegie Mellon CyLab. "The only reason Macs were not massively targeted is that they didn't have enough of a market share to make them interesting for a hacker to devote resources to try to compromise those machines. Now that they've acquired a fairly sizeable market share, it makes sense that the bad guys would focus some attention on the Mac platform."

[see all the headlines]

Upcoming events

May 15, 2012: CERT Training
Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth

This three-day course begins with a brief review of the conceptual foundations of information security. This course is designed for individuals charged with implementing information security throughout the IT enterprise. Therefore, this course is an ideal pursuit for IT and Security managers, and/or system administrators and IT security personnel who would like to step up to the management level.

June 9, 2012: Celebration
CMU Silicon Valley 10th Anniversary Celebration

Join us on Saturday, June 9, 2012 to celebrate the rich history of CMU and its impact on the west coast! We will host the 10th anniversary event on the campus at Moffett Field beginning at 3:30 PM. All attendees are welcome to participate in the festivities. 

June 19, 2012: Research Talk
The Persistence of Passwords and Evaluating Authentication Alternatives
Paul C. Van Oorschot, Professor, Carleton University

[see all events]