13 ethics privacy - computer science at rpicutler/classes/visualization/s16/lectures/13... ·...
TRANSCRIPT
3/23/16
1
Ethics&Privacy
PlanforToday
• Ins:tu:onalReviewBoard(IRB)• ReadingsforthisWeek– "Adap:vePrivacy-PreservingVisualiza:onUsingParallelCoordinates”
– "AgileEthicsforMassifiedResearchandVisualiza:on”
• Tangen:allyRelatedGraphics/VisionTopics• Assignment7:FinalProjectIdeas
• ReadingforFriday
3/23/16
2
• WorldWarII:Germanphysiciansconductedmedicalexperimentsonconcentra:oncampprisonerswithouttheirconsent.TestedbloodcloYng(shoo:ngthem),vaccines(infec:ngthem),effec:venessofpoisonbullets,andeffectsofhighal:tudeandlowoxygen.
• Inthe1950's,thalidomidegiventopregnantwomentohelpwithsleepandnausea,buttheydidnotknowitwasexperimentalnordidtheygivenconsent.
• Tuskegee,Alabama(1940s-1970s):Low-incomeAfrican-Americanmaleswithhighincidenceofsyphilisinfec:onweregivenfreemedicalexamina:ons,butnottoldabouttheirdisease,andresearchersintervenedtopreventtreatment.
• 1961,Milgramobediencestudy(theshockmachine):lackofproperaben:ontodebriefing,didn'trevealthepurposeofthestudy,didn'tcomfortsubjectsethicalqualmsabouthavinginflictedpainonafellowhuman,didn'tofferhispar:cipantsanopportunitytooptoutofthestudy.
• Zimbardo'sprisonexperiment(Stanford):ThestudydidmeetthecriteriaofhisIRBin1973!
• Inthe70'svariousfederalregula:onsestablishedIRBatallresearchins:tu:ons.
Ins:tu:onalReviewBoard(IRB)
• Privacy,Confiden:ality,Anonymity,andInformedConsent
• Reducerisk(physical/mental/privacy)tothepar:cipantsengagedinresearch
3/23/16
3
hbps://oasis.cs.rpi.edu/
3/23/16
4
Spa:allyAugmentedReality(SAR)Projec:on
cameradetectsdesigngeometry
6projectorsaugmentdesign
designsketchedwithfoam-corewalls
3/23/16
5
PlanforToday
• Ins:tu:onalReviewBoard(IRB)• ReadingsforthisWeek– "Adap:vePrivacy-PreservingVisualiza:onUsingParallelCoordinates”
– "AgileEthicsforMassifiedResearchandVisualiza:on”
• Tangen:allyRelatedGraphics/VisionTopics• Assignment7:FinalProjectIdeas
• ReadingforFriday
3/23/16
6
"Adap:vePrivacy-PreservingVisualiza:onUsingParallelCoordinates”,Dasgupta&Kosara,TVCG2011.
• Differentpurposesfor“Visualiza:on”:– Conveyinforma:onorart?Ismisleadingnecessarilybadwhenvisualizingforartpurposes?
Contextmabers.– Findtheappropriatebalancebetweenart(eyecatching&memorable)andscien:ficaccurate
&honestdatapresenta:on.
• Somevisualiza:ontechniquesarealreadyquitelossy(e.g.,piechart)orjustconfusing(e.g.,parallelcoordinates?)andobfusca:onmaynotbenecessary– Makingfalseconnec:ons
– Limitvisualiza:onto500pixelstothwartabacks(!?)
– Roundingpixelcoordinates
• Imprac:calintherealworld?
• Somuchefforttomakeavisualiza:onlessuseful.(Whymakethevisualiza:onatall?Whoisthetargetaudienceofthisvisualiza:on?)
• Needtoinves:gatereliabilityofdatabeforerepor:ngit
• K-anonymity&l-diversity
• (Trusted)serverdoesclustering&onlysendsclustersto(untrusted)client
• Wri:ng
– Nicetoreadabouttheprocessandideasfortechniquesthatul:matelydidn’twork
– Wouldhavebeenbeberwriben/easiertoreadiftheyhadstatedupfrontwhattheywantedtoaccomplish
– Diagrams&chartsnotwellexplained
• Couldbefurthersecured:– Don’tplaceunclustereddataonthepublicfacingmachine– Don’teverre-clusterthedata(preventclusteringabacks)
• Client-servermodel:Computa:on&networkingcosts?• Howwelldoesthisworkforsmalldatasets?• Hadn’tconsideredvisualiza:onasameansofdatabreach,
reassuringthatpeopleareresearchingtheproblem.• Howmuchaccuracyinanalysisdowelose?
– Obsuring&blurringdata(oppositeofourusualfocusonclarity&accuracy!)
• Whataboutmoresophis:catedabacks?…?– Maybethisisn’t100%secure,butit’simportanttodosomething!
• WouldlikeauserstudycomparingtheirPrivacy-PreservingParallelCoordinatestooriginalfulldataParallelCoordinates.
• Quasi-Iden:fiers(isananonymousformreallyanonymous?)• Privacypoliciesthatdeclarehowtheycanandwillshareyour
personaldata…
3/23/16
7
"AgileEthicsforMassifiedResearchandVisualiza:on”,Neuhaus&Webmoor,Informa:on,Communica:on&Society2012.• Privacy,confiden:ality,anonymity,andinformedconsent
– Minimizerisktopar:cipants– Observa:onalstudydoesnotrequireconsent– (current)IRBprocessdoesnot/cannotworkatmassivescale– Asinglepersoncanmoreeasilydowhatusedtotakeateamofresearchersmuch
more:me.• Agileethics:toohighleveltobeenforceable?• Eventhoughindividualsmadethisdataavailable,itisresearchers
responsibilitytonotputthemindanger• Notshowingindividuals,onlygeneraltrends• Iftheresearchteam’sinforma:onissimilarlypublic/vulnerable,itsok?• Geometryfortwiber• Public-privategreyscale• “Nowthatyou’vereadthis…Justbemorecareful,ok?”• Wri:ng
– Confusingpaperorganiza:on– Lowresolu:onimages– Unconven:onalacronyms– Footnotesatendofpaper(preferatendofeachpage)
• Jargon-y• Unnecessarilylengthy?• Websurfingisdangerous• Twiberisscary(amountofpersonaldataavailablesurprising)– Userscan(now?)disableloca:ontracking– AreTwiber“protected”accountsnew?– Readthefineprintbeforesharingyourdata!
• TimeRosevisualiza:onisnewtome• Scaberedtopics• Fitnesstrackingapplica:onsoffertopostyourmorningrunonfacebookaredangerous
• Proposedsolu:onsaretooidealis:c?
3/23/16
8
SocietyofProfessionalJournalists'CodeofEthics• Isthisactuallyused?Imprac:cal(won’thavealongcareer).Seemslikemanymediaoutletsdotheopposite– Examples?
• Firstamendment,exposenega:vequali:es/ac:onsofpeopleinpower
• Createemo:onsthatcaninfluenceviewers–Tuvesaystoavoidgarnishes(forthisreason?)
hbp://visual.ly/about/ethics
3/23/16
9
Visual.ly'sCodeofEthicsforDataVisualiza:onProfessionals
• Dataanalysisisimportant• Toonarrowfocusoromissioncanleadtobias
• Incorrectanalysismustbeavoided
• Beopentocri:cism,learnfrompastwork
Interes:ngTidbits
• Internetisanoceanofdata• Researchresultspouredbackintooceanofdata• Surveillance:Shoppingmallsareprivatespaces,butmadetofeellikepublicspaces
• File/logplanneddatacollec:onsinadvance(pre-planningrequired,datamoreprecious)
• Researchersshouldmakethemselvesequallypublic
3/23/16
10
InformedConsent
• Doyoucarefullyreadeverydocumentyousign?Every“agreetoterms”bubonyouclick?
• Datacanbetakenoutofcontext,usedinwaysotherthanintended
• Previously:requiredateamofresearcherstogatherdata
• Now:asinglepersoncandoitalone-lostinformalpeerconsulta:onofethicsconcerns
• Doesanindividualstudent’sgraderiseover:me(repeatedsubmissions)?
• DostudentswhostartsubmiYngearlierintheweekhaveahigherfinalgradeforthathomework?
• Dostudentswhosubmitmore:mesgethighergrades?
3/23/16
11
Whatissufficienttoanonymizedata?
• Removeexplicitiden:fiers• Smalldatasetscauseproblems
• Quasiiden:fiers• Whatarethesensi:veabributes
• Sani:zedataonthefly,constrainingtheinterac:on
• Assumedataholderisawareofdatasensi:vity(andappropriatelyconcerned)
Privacy&Visualiza:on
• Mostvisualiza:oncomputa:onassumesunrestrictedaccesstodata
• Howdowedothiscomputa:onwithpar:alinforma:on?
• Howdoyoudesignhardware/sovwaresystemtoensuredatasecurity?
3/23/16
12
• Whowouldpoten:allybenefitfromaccesstothisdata?(Whyisthisagreyarea?)– Scien:ficdiscovery– Improvehealthcare
• Whatdatahasprivacyconcerns?– Corporatesecrets– Healthrecords– Personalfinances– Personalloca:on
Riskstousers/par:cipants?• Quasi-iden:fiers&Doxing/doxxing(documenttracing):
“Internet-basedprac:ceofresearchingandpublishingpersonallyiden:fiableinforma:onaboutanindividual.Themethodsemployedinpursuitofthisinforma:onrangefromsearchingpubliclyavailabledatabasesandsocialmediawebsiteslikeFacebook,tohacking,andsocialengineering.Itiscloselyrelatedtocyber-vigilan:sm,hack:vismandcyber-bullying.”(defini:onfromWikipedia)
• Ifyou’renotinteres:ng(noworeverinthefuture),youprobablyhaveprivacy?
3/23/16
13
Facebookgenera:onofoversharers?
• It’syourchoicetoshareornotusetheserviceatall(Isthistrue?)
• Genera:onthatbelievesprivacydoesn’t/can’texistforanyone.Istherenoworwillthereberegretforwhathasbeenshared?
• Dowehaveanobliga:ontoeducateyounginternetuserson(lackof)onlineprivacy?Onhoweasyitistoconnectthedotsevenwithoutusernamesorobviousiden:fiers?
WhenareMITstudentsasleep?LeonLinandAaronScheinberg
hbp://tech.mit.edu/V132/N59/pressure/sleepinghours/index.htm
3/23/16
14
HealthInsurancePortabilityandAccountabilityAct(HIPAA)• LongTitle:“AnActToamendtheInternalRevenueCodeof1986to
improveportabilityandcon:nuityofhealthinsurancecoverageinthegroupandindividualmarkets,tocombatwaste,fraud,andabuseinhealthinsuranceandhealthcaredelivery,topromotetheuseofmedicalsavingsaccounts,toimproveaccesstolong-termcareservicesandcoverage,tosimplifytheadministra:onofhealthinsurance,andforotherpurposes.”
• Unintendednega:veoutcomes– Reducedretrospec:vechart-basedresearch(responsesdroppedfrom
96%to34%inonestudyonheart-abackfollowupsurveys)– Legalis:cdetailsonprivacypreserva:ontechniqueshasmadeinformed
consentformsevenlongerandlessuser-friendly– S:ffpenal:esforviola:ons,leaddoctorstowithholdinforma:on(even
some:mesfrompeoplewhohaverightstoseeit!)– Expensivetoimplement– Requirestraininghealthcareproviders
PlanforToday
• Ins:tu:onalReviewBoard(IRB)• ReadingsforthisWeek– "Adap:vePrivacy-PreservingVisualiza:onUsingParallelCoordinates”
– "AgileEthicsforMassifiedResearchandVisualiza:on”
• Tangen:allyRelatedGraphics/VisionTopics• Assignment7:FinalProjectIdeas
• ReadingsforFriday
3/23/16
15
Assignment7:FinalProjectIdeas• ½pointsofaregular1weekassignment• Invent2differentFinalProjectIdeas
– “Who"(audience),"why"(researchques:on),"what"(thefinishedvisualiza:on)
– Onetechnicalchallengefortheproject.Whatmakesitdifficult?Whatisapoten:al“risk”forcomple:on?Forexample:• acquiringthedata,• workingwithverylargedata,• implemen:nganewvisualiza:ondesign,• implemen:nganovelinterac:onscheme,or• revisingthevisualiza:ondesigntovalidateyourhypothesis.
– Doyoualreadyhaveapartner?• MakeLMSpostbyThursday• Replyto3otherstudentsonLMSbyMonday
PlanforToday
• Ins:tu:onalReviewBoard(IRB)• ReadingsforthisWeek– "Adap:vePrivacy-PreservingVisualiza:onUsingParallelCoordinates”
– "AgileEthicsforMassifiedResearchandVisualiza:on”
• Tangen:allyRelatedGraphics/VisionTopics• Assignment7:FinalProjectIdeas
• ReadingsforFriday
3/23/16
16
ReadingforFriday:(chooseone)
• “LabelMe:onlineimageannota:onandapplica:ons”Torralba,Russell,&Yuen,IEEE,2010
ReadingforFriday:(chooseone)
• “QSplat:AMul:resolu:onPointRenderingSystemforLargeMeshes”,Rusinkiewicz&Levoy,SIGGRAPH2000