visible-privacyppt：可见privacyppt.ppt

Making privacy visible Lorrie Faith Cranor October 19, 2007 Privacy concerns seem inconsistent with behavior People say they want privacy but they don’t take steps to protect it Many hypotheses as to why that is They don’t really care that much about privacy They prefer immediate gratification now to privacy protections that they won’t benefit from until later They don’t understand the privacy implications of their behavior The cost of privacy protection (including figuring out how to protect their privacy) is too high … Making privacy visible Communicate meaningfully about privacy risks Make it easy for people to understand and control privacy options Requirements for meaningful control Individuals must understand what options they have Individuals must understand implications of their options Individuals must have the means to exercise options Costs must be reasonable Money, time, convenience, benefits Privacy policies Inform consumers about privacy practices Consumers can decide whether practices are acceptable, when to opt-out Most policies require college-level skills to understand, long, change without notice Few people read privacy policies Existing privacy policies are not an effective way to inform consumers or give them privacy controls Platform for Privacy Preferences Project (P3P) World Wide Web Consortium (W3C) recommendation Standard machine-readable (XML) format for privacy policies Enables browsers and other tools to Summarize privacy policies Compare policies with user preferences Alert and advise users P3P support built into IE6/7 and Netscape 7 Privacy Bird Free download of beta from / “Browser helper object” for IE6 Reads P3P policies automatically Bird icon indicates whether site matches user’s privacy preferences Clicking on bird icon gives more information Bird is privacy indicator Red bird indicates mismatch Privacy settings Privacy Finder Prototype developed at ATT Labs, improved and deployed by CUPS Uses Google or Yahoo! search API Chec