Mobile privacy and security can be a collaborative process where individuals seek advice and help from their trusted communities. To support such collective privacy and security management, we developed a mobile app for Community Oversight of Privacy and Security ("CO-oPS") that allows community members to review one another's apps installed and permissions granted to provide feedback. We conducted a four-week-long field study with 22 communities (101 participants) of friends, families, or co-workers who installed the CO-oPS app on their phones. Measures of transparency, trust, and awareness of one another's mobile privacy and security behaviors, along with individual and community participation in mobile privacy and security co-management, increased from pre- to post-study. Interview findings confirmed that the app features supported collective considerations of apps and permissions. However, participants expressed a range of concerns regarding having community members with different levels of technical expertise and knowledge regarding mobile privacy and security that can impact motivation to participate and perform oversight. Our study demonstrates the potential and challenges of community oversight mechanisms to support communities to co-manage mobile privacy and security.
翻译:移动隐私与安全可以是一个协作过程,个人会从其信赖的社区中寻求建议和帮助。为支持这种集体隐私与安全管理,我们开发了一款用于社区隐私与安全监督的移动应用程序("CO-oPS"),该程序允许社区成员互相审查各自安装的应用程序及其授予的权限,以提供反馈。我们开展了为期四周的实地研究,涉及22个社区(101名参与者),这些社区由朋友、家人或同事组成,他们在手机上安装了CO-oPS应用程序。从研究前到研究后,透明度、信任度以及对彼此移动隐私与安全行为的认知程度,以及个人和社区在移动隐私与安全协同管理中的参与度均有提升。访谈结果证实,该应用程序的功能支持了对应用及其权限的集体考量。然而,参与者表达了一系列担忧,涉及社区成员在移动隐私与安全方面技术专长和知识水平存在差异,这可能影响参与动机和监督效果。我们的研究展示了社区监督机制在支持社区协同管理移动隐私与安全方面的潜力与挑战。