CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

54
CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University

Transcript of CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Page 1: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

CARS, CONDOMS, & INFORMATION SHARINGHOW PRIVATE IS PRIVATE ENOUGH?

Vaibhav Garg Drexel University

Page 2: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Cars

J. Adams. Cars, cholera, and cows. CATO Institute, 335: 1–49, 1999.

Page 3: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Seat Belt Habit

http://youtu.be/Fa5BVk9mbSY

Page 4: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Condoms

M. Cassell, D. Halperin, J. Shelton, and D. Stanton. Risk compensation: The Achilles’ heel of innovations in HIV prevention? British Medical Journal, 332(7541):605–607, 2006.

Page 5: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy

L. Brandimarte, A. Acquisti, and G. Loewenstein. Misplaced confidences: Privacy and the control paradox. Social

Psychological and Personality Science, 2012.

Page 6: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Risk

Comes from the Italian word ‘risicare’

Probability * Magnitude

Page 7: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Rational Agent

Smoking is a factor which contributes to lung cancer. Most cancers that start in lung, known as primary lung cancers, are carcinomas that derive from epithelial cells. Depending on the type of tumor, so-called paraneoplastic phenomena may initially attract attention to the disease.[16] In lung cancer, these phenomena may include Lambert-Eaton myasthenic syndrome (muscle weakness due to auto-antibodies), hypercalcemia, or syndrome of inappropriate antidiuretic hormone (SIADH). Tumors in the top (apex) of the lung, known as Pancoast tumors,[17] may invade the local part of the sympathetic nervous system, leading to changed sweating patterns and eye muscle problems (a combination known as Horner's syndrome) as well as muscle weakness in the hands due to invasion of the brachial plexus.

Page 8: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy Risk Communication (1)

Page 9: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy Risk Communication (2)

Page 10: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy Risk Communication (3)

Page 11: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

People don’t care

Complete Information == Market Efficiency

R. A. Posner. The Economics of Privacy. American Economic Review, 71(2):405-409, 1981.

Page 12: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

People don’t know

Info graphic from Matt McKeon.

Page 13: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Usability

P. Inglesant and M. Sasse. The true cost of unusable password policies: password use in the wild. In Proceedings of the

28th International conference on Human factors in computing systems, pages 383–392. ACM, 2010.

Page 14: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Risk

Comes from the Italian word ‘risicare’

Probability * Magnitude

Page 15: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Boundedly Rational

J. Grossklags and A.Acquisti. When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information. Workshop on Economics of Information Security. 2007.

Page 16: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

16

Certainty Effect

Bird in hand is worth two in the bush!

For sure!

Maybe! P=0.1

Page 17: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

17

Reflection Effect

Lose For sure!

Lose Maybe! P=0.1

We prefer certain gains but uncertain losses!

Page 18: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 19: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 20: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 21: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 22: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 23: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Class Participation

Page 24: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Boundedly Rational

J. Grossklags and A.Acquisti. When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information. Workshop on Economics of Information Security. 2007.

Page 25: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

25

Voluntariness

Page 26: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

26

Immediacy

Page 27: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

27

Knowledge to Exposed

Page 28: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

28

Knowledge to Science

Page 29: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

29

Control

Page 30: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

30

Newness

Page 31: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

31

Common-Dread

Page 32: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

32

Chronic-catatrophic

Page 33: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

33

Severity

Page 34: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Nine Dimensional Model

Voluntariness Immediacy Knowledge to Experts Knowledge to Exposed Control Newness Common-Dread Chronic-Catastrophic SeverityB. Fischhoff, P. Slovic, S. Lichtenstein, S. Read, and B. Combs. How safe is safe enough? A psychometric study of

attitudes towards technological risks and benefits. Policy Sciences, 9(2):127–152, 1978.

Page 35: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Revealed Preferences

Revealed Preferences Attitudes are reflected by behavior Traditionally Acceptable

‘The… assumption is that historically revealed social preferences and costs are sufficiently enduring to permit their use for predictive purposes.’

C. Starr. Social benefit versus technological risk. Science, 165(3899):1232–1238, 1969.

Page 36: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Expressed Preferences

Expressed Preferences Behaviors are informed by attitudes What end-users want or acceptable risk?

‘The societal value system fluctuates with time, and the technological capability to follow fast changing societal goals does not exist.’

C. Starr, R. Rudman, and C. Whipple. Philosophical Basis for Risk Analysis. Annual Review of Energy, 1:629-662, 1976.

Page 37: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Nine Dimensional Model

Voluntariness Immediacy Knowledge to Experts Knowledge to Exposed Control Newness Common-Dread Chronic-Catastrophic SeverityB. Fischhoff, P. Slovic, S. Lichtenstein, S. Read, and B. Combs. How safe is safe enough? A psychometric study of

attitudes towards technological risks and benefits. Policy Sciences, 9(2):127–152, 1978.

Page 38: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Rational Risk Communication

Smoking is a factor which contributes to lung cancer. Most cancers that start in lung, known as primary lung cancers, are carcinomas that derive from epithelial cells. Depending on the type of tumor, so-called paraneoplastic phenomena may initially attract attention to the disease.[16] In lung cancer, these phenomena may include Lambert-Eaton myasthenic syndrome (muscle weakness due to auto-antibodies), hypercalcemia, or syndrome of inappropriate antidiuretic hormone (SIADH). Tumors in the top (apex) of the lung, known as Pancoast tumors,[17] may invade the local part of the sympathetic nervous system, leading to changed sweating patterns and eye muscle problems (a combination known as Horner's syndrome) as well as muscle weakness in the hands due to invasion of the brachial plexus.

Page 39: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Boundedly Rational

Page 40: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Gender Differences

Page 41: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Aging!

Page 42: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Income

Page 43: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Education

Page 44: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Mental Models

Physical Criminal Medical Warfare Economic

Page 45: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Boundedly Rational

Page 46: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Mental Model

Page 47: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy Case Study

Phishing Keyloggers Older Adults

Page 48: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

48

Why Older Adults?

Fastest growing demographic Susceptibility to fraud

20% of the victims (FTC) 1/10th of publicly held bonds 1/3rd of publicly held stock

Page 49: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

49

Why Design for Older Adults

Designs for younger people Assumptions

Technical experience Sight, focus, dexterity Risk posture

Page 50: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

50

Design Constraints

Memory Semantic

Learnt Lasts longer Retention is better

Episodic Experienced Richer Retrieval is better!

Mental Models Physical, Criminal, Economic, Medical, and

Warfare

Page 51: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

51

Design Constraints

Memory Semantic

Learnt Lasts longer Retention is better

Episodic Experienced Richer Retrieval is better!

Mental Models Physical, Criminal, Economic, Medical, and

Warfare

Page 52: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

52

Risk Communication: Text

Page 53: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

Privacy Videos

Phishing http://youtu.be/4ZQ9pFTCdy4

Keylogger http://youtu.be/6zHJoZqrCB0

Page 54: CARS, CONDOMS, & INFORMATION SHARING HOW PRIVATE IS PRIVATE ENOUGH? Vaibhav Garg Drexel University.

54

To conclude…