PrivateBits: managing visual privacy in web browsers

ABSTRACT

Privacy can be an issue during collaboration around a personal display when previous browsing activities become visible within web browser features (e.g., AutoComplete). Users currently lack methods to present only appropriate traces of prior activity in these features. In this paper we explore a semi-automatic approach to privacy management that allows users to classify traces of browsing activity and filter them appropriately when their screen is visible by others. We developed PrivateBits, a prototype web browser that instantiates previously proposed general design guidelines for privacy management systems as well as those specific to web browser visual privacy. A preliminary evaluation found this approach to be flexible enough to meet participants' varying privacy concerns, privacy management strategies, and viewing contexts. However, the results also emphasized the need for additional security features to increase trust in the system and raised questions about how to best manage the tradeoff between ease of use and system concealment.

REFERENCES

• 1: Mark S. Ackerman , Lorrie Cranor, Privacy critics: UI components to safeguard users' privacy, CHI '99 extended abstracts on Human factors in computing systems, May 15-20, 1999, Pittsburgh, Pennsylvania [doi>10.1145/632716.632875]
• 2: Mark S. Ackerman , Lorrie Faith Cranor , Joseph Reagle, Privacy in e-commerce: examining user scenarios and privacy preferences, Proceedings of the 1st ACM conference on Electronic commerce, p.1-8, November 03-05, 1999, Denver, Colorado, United States [doi>10.1145/336992.336995]
• 3: Alessandro Acquisti, Privacy in electronic commerce and the economics of immediate gratification, Proceedings of the 5th ACM conference on Electronic commerce, May 17-20, 2004, New York, NY, USA [doi>10.1145/988772.988777]
• 4: Anne Aula , Natalie Jhaveri , Mika Käki, Information search and re-access strategies of experienced web users, Proceedings of the 14th international conference on World Wide Web, May 10-14, 2005, Chiba, Japan [doi>10.1145/1060745.1060831]
• 5: Lior Berry , Lyn Bartram , Kellogg S. Booth, Role-based control of shared application views, Proceedings of the 18th annual ACM symposium on User interface software and technology, October 23-26, 2005, Seattle, WA, USA [doi>10.1145/1095034.1095039]
• 6: Richard Boardman , M. Angela Sasse, "Stuff goes into the computer and doesn't come out": a cross-tool study of personal information management, Proceedings of the SIGCHI conference on Human factors in computing systems, p.583-590, April 24-29, 2004, Vienna, Austria [doi>10.1145/985692.985766]
• 7: Camp, L. J., McGrath, C. and Genkina, A. (2006). Security and Morality: A Tale of User Deceit. In Proc. of Models of Trust for the Web (MTW '06).
• 8: Rogério de Paula , Xianghua Ding , Paul Dourish , Kari Nies , Ben Pillet , David Redmiles , Jie Ren , Jennifer Rode , Roberto Silva Filho, Two experiences designing for effective security, Proceedings of the 2005 symposium on Usable privacy and security, p.25-34, July 06-08, 2005, Pittsburgh, Pennsylvania [doi>10.1145/1073001.1073004]
• 9: DePaulo, B. M., Wetzel, C., Sternglanz, R. W. and Wilson, M. J. W. (2003). Verbal and Nonverbal Dynamics of Privacy, Secrecy, and Deceit. J. Of Social Issues 59(2): 391--410.
• 10: Kirstie Hawkey , Kori M. Inkpen, Privacy gradients: exploring ways to manage incidental information during co-located collaboration, CHI '05 extended abstracts on Human factors in computing systems, April 02-07, 2005, Portland, OR, USA [doi>10.1145/1056808.1056934]
• 11: Kirstie Hawkey , Kori M. Inkpen, Examining the content and privacy of web browsing incidental information, Proceedings of the 15th international conference on World Wide Web, May 23-26, 2006, Edinburgh, Scotland [doi>10.1145/1135777.1135801]
• 12: Kirstie Hawkey , Kori M. Inkpen, Keeping up appearances: understanding the dimensions of incidental information privacy, Proceedings of the SIGCHI conference on Human Factors in computing systems, April 22-27, 2006, Montréal, Québec, Canada [doi>10.1145/1124772.1124893]
• 13: William Jones , Harry Bruce , Susan Dumais, Keeping found things found on the web, Proceedings of the tenth international conference on Information and knowledge management, October 05-10, 2001, Atlanta, Georgia, USA [doi>10.1145/502585.502607]
• 14: Melanie Kellar , Carolyn Watters , Michael Shepherd, The impact of task on the usage of web browser navigation mechanisms, Proceedings of Graphics Interface 2006, June 07-09, 2006, Quebec, Canada
• 15: Tessa Lau , Oren Etzioni , Daniel S. Weld, Privacy interfaces for information management, Communications of the ACM, v.42 n.10, p.88-94, Oct. 1999 [doi>10.1145/317665.317680]
• 16: Scott Lederer , I. Hong , K. Dey , A. Landay, Personal privacy through understanding and action: five pitfalls for designers, Personal and Ubiquitous Computing, v.8 n.6, p.440-454, November 2004 [doi>10.1007/s00779-004-0304-9]
• 17: Lederer, S., Mankoff, J. and Dey, A. K. (2003). Towards a Deconstruction of the Privacy Space. Workshop on Ubicomp Communities: Privacy as Boundary Negotiation, UBICOMP 2003, http://guir.berkeley.edu/pubs/ubicomp2003/privacyworkshop/papers/lederer-privacyspace.pdf
• 18: Scott Lederer , Jennifer Mankoff , Anind K. Dey, Who wants to know what when? privacy preference determinants in ubiquitous computing, CHI '03 extended abstracts on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/765891.765952]
• 19: Marx, G. T. (2003). A Tack in the Shoe: Neutralizing and Resisting the New Surveillance. J. Of Social Issues 59(2): 369--390.
• 20: D. Harrison McKnight , Vivek Choudhury , Charles Kacmar, Developing and Validating Trust Measures for e-Commerce: An Integrative Typology, Information Systems Research, v.13 n.3, p.334-359, September 2002 [doi>10.1287/isre.13.3.334.81]
• 21: Judith S. Olson , Jonathan Grudin , Eric Horvitz, A study of preferences for sharing and privacy, CHI '05 extended abstracts on Human factors in computing systems, April 02-07, 2005, Portland, OR, USA [doi>10.1145/1056808.1057073]
• 22: Sameer Patil , Alfred Kobsa, Uncovering privacy attitudes and practices in instant messaging, Proceedings of the 2005 international ACM SIGGROUP conference on Supporting group work, November 06-09, 2005, Sanibel Island, Florida, USA [doi>10.1145/1099203.1099220]
• 23: Sameer Patil , Jennifer Lai, Who gets to know what when: configuring privacy permissions in an awareness application, Proceedings of the SIGCHI conference on Human factors in computing systems, April 02-07, 2005, Portland, Oregon, USA [doi>10.1145/1054972.1054987]
• 24: Reilly, D., Dearman, D., Ha, V., Smith, I. and Inkpen, K. (2006). "Need to Know": Examining Information Need in Location Disclosure. In Proc. of Pervasive 2006, 33--49.
• 25: Peter Tarasewich , Jun Gong , Richard Conlan, Protecting private data in public, CHI '06 extended abstracts on Human factors in computing systems, April 22-27, 2006, Montréal, Québec, Canada [doi>10.1145/1125451.1125711]
• 26: Tara Whalen , Kori M. Inkpen, Gathering evidence: use of visual security cues in web browsers, Proceedings of Graphics Interface 2005, May 09-11, 2005, Victoria, British Columbia

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.3 Group and Organization Interfaces

Additional Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.4 Hypertext/Hypermedia
          Subjects: User issues; Theory

Keywords:
incidental information, privacy, usable security, web browser