cars, condoms, & information sharing how private is private enough? vaibhav garg drexel...

54
CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Upload: makena-dobbs

Post on 15-Jan-2016

216 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

CARS, CONDOMS, & INFORMATION SHARINGHOW PRIVATE IS PRIVATE ENOUGH?

Vaibhav Garg Drexel University

Page 2: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Cars

J. Adams. Cars, cholera, and cows. CATO Institute, 335: 1–49, 1999.

Page 3: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Seat Belt Habit

http://youtu.be/Fa5BVk9mbSY

Page 4: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Condoms

M. Cassell, D. Halperin, J. Shelton, and D. Stanton. Risk compensation: The Achilles’ heel of innovations in HIV prevention? British Medical Journal, 332(7541):605–607, 2006.

Page 5: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy

L. Brandimarte, A. Acquisti, and G. Loewenstein. Misplaced confidences: Privacy and the control paradox. Social

Psychological and Personality Science, 2012.

Page 6: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Risk

Comes from the Italian word ‘risicare’

Probability * Magnitude

Page 7: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Rational Agent

Smoking is a factor which contributes to lung cancer. Most cancers that start in lung, known as primary lung cancers, are carcinomas that derive from epithelial cells. Depending on the type of tumor, so-called paraneoplastic phenomena may initially attract attention to the disease.[16] In lung cancer, these phenomena may include Lambert-Eaton myasthenic syndrome (muscle weakness due to auto-antibodies), hypercalcemia, or syndrome of inappropriate antidiuretic hormone (SIADH). Tumors in the top (apex) of the lung, known as Pancoast tumors,[17] may invade the local part of the sympathetic nervous system, leading to changed sweating patterns and eye muscle problems (a combination known as Horner's syndrome) as well as muscle weakness in the hands due to invasion of the brachial plexus.

Page 8: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy Risk Communication (1)

Page 9: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy Risk Communication (2)

Page 10: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy Risk Communication (3)

Page 11: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

People don’t care

Complete Information == Market Efficiency

R. A. Posner. The Economics of Privacy. American Economic Review, 71(2):405-409, 1981.

Page 12: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

People don’t know

Info graphic from Matt McKeon.

Page 13: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Usability

P. Inglesant and M. Sasse. The true cost of unusable password policies: password use in the wild. In Proceedings of the

28th International conference on Human factors in computing systems, pages 383–392. ACM, 2010.

Page 14: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Risk

Comes from the Italian word ‘risicare’

Probability * Magnitude

Page 15: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Boundedly Rational

J. Grossklags and A.Acquisti. When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information. Workshop on Economics of Information Security. 2007.

Page 16: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

16

Certainty Effect

Bird in hand is worth two in the bush!

For sure!

Maybe! P=0.1

Page 17: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

17

Reflection Effect

Lose For sure!

Lose Maybe! P=0.1

We prefer certain gains but uncertain losses!

Page 18: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 19: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 20: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 21: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 22: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 23: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Class Participation

Page 24: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Boundedly Rational

J. Grossklags and A.Acquisti. When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information. Workshop on Economics of Information Security. 2007.

Page 25: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

25

Voluntariness

Page 26: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

26

Immediacy

Page 27: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

27

Knowledge to Exposed

Page 28: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

28

Knowledge to Science

Page 29: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

29

Control

Page 30: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

30

Newness

Page 31: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

31

Common-Dread

Page 32: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

32

Chronic-catatrophic

Page 33: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

33

Severity

Page 34: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Nine Dimensional Model

Voluntariness Immediacy Knowledge to Experts Knowledge to Exposed Control Newness Common-Dread Chronic-Catastrophic SeverityB. Fischhoff, P. Slovic, S. Lichtenstein, S. Read, and B. Combs. How safe is safe enough? A psychometric study of

attitudes towards technological risks and benefits. Policy Sciences, 9(2):127–152, 1978.

Page 35: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Revealed Preferences

Revealed Preferences Attitudes are reflected by behavior Traditionally Acceptable

‘The… assumption is that historically revealed social preferences and costs are sufficiently enduring to permit their use for predictive purposes.’

C. Starr. Social benefit versus technological risk. Science, 165(3899):1232–1238, 1969.

Page 36: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Expressed Preferences

Expressed Preferences Behaviors are informed by attitudes What end-users want or acceptable risk?

‘The societal value system fluctuates with time, and the technological capability to follow fast changing societal goals does not exist.’

C. Starr, R. Rudman, and C. Whipple. Philosophical Basis for Risk Analysis. Annual Review of Energy, 1:629-662, 1976.

Page 37: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Nine Dimensional Model

Voluntariness Immediacy Knowledge to Experts Knowledge to Exposed Control Newness Common-Dread Chronic-Catastrophic SeverityB. Fischhoff, P. Slovic, S. Lichtenstein, S. Read, and B. Combs. How safe is safe enough? A psychometric study of

attitudes towards technological risks and benefits. Policy Sciences, 9(2):127–152, 1978.

Page 38: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Rational Risk Communication

Smoking is a factor which contributes to lung cancer. Most cancers that start in lung, known as primary lung cancers, are carcinomas that derive from epithelial cells. Depending on the type of tumor, so-called paraneoplastic phenomena may initially attract attention to the disease.[16] In lung cancer, these phenomena may include Lambert-Eaton myasthenic syndrome (muscle weakness due to auto-antibodies), hypercalcemia, or syndrome of inappropriate antidiuretic hormone (SIADH). Tumors in the top (apex) of the lung, known as Pancoast tumors,[17] may invade the local part of the sympathetic nervous system, leading to changed sweating patterns and eye muscle problems (a combination known as Horner's syndrome) as well as muscle weakness in the hands due to invasion of the brachial plexus.

Page 39: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Boundedly Rational

Page 40: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Gender Differences

Page 41: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Aging!

Page 42: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Income

Page 43: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Education

Page 44: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Mental Models

Physical Criminal Medical Warfare Economic

Page 45: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Boundedly Rational

Page 46: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Mental Model

Page 47: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy Case Study

Phishing Keyloggers Older Adults

Page 48: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

48

Why Older Adults?

Fastest growing demographic Susceptibility to fraud

20% of the victims (FTC) 1/10th of publicly held bonds 1/3rd of publicly held stock

Page 49: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

49

Why Design for Older Adults

Designs for younger people Assumptions

Technical experience Sight, focus, dexterity Risk posture

Page 50: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

50

Design Constraints

Memory Semantic

Learnt Lasts longer Retention is better

Episodic Experienced Richer Retrieval is better!

Mental Models Physical, Criminal, Economic, Medical, and

Warfare

Page 51: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

51

Design Constraints

Memory Semantic

Learnt Lasts longer Retention is better

Episodic Experienced Richer Retrieval is better!

Mental Models Physical, Criminal, Economic, Medical, and

Warfare

Page 52: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

52

Risk Communication: Text

Page 53: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Privacy Videos

Phishing http://youtu.be/4ZQ9pFTCdy4

Keylogger http://youtu.be/6zHJoZqrCB0

Page 54: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

54

To conclude…