CCE STEM: Standard: Collaborative Research: The Development of Ethical Cultures in Computer Security Research

CCE STEM：标准：协作研究：计算机安全研究中道德文化的发展

• 批准号: 1634202
• 负责人: Megan Finn
• 金额: $ 33.61万
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1634202&HistoricalAwards=false
• 关键词: CCE; STEM; Standard; Collaborative; Research

Computer security researchers prevent, discover, and fix flaws in devices and cyberinfrastructures, thereby impacting national security, business practices, information privacy, and personal safety. However, these researchers must also navigate ethical dilemmas about how to use big data and shared networked resources to discover vulnerabilities; how to safely expose these problems; and how to best ensure that critical vulnerabilities are fixed. This proposed research will analyze the scholarly discourse and private reflections of computer security researchers over time. The goal is to reveal insights about how people, changes in technology, and changes in research practices shaped ethical cultures in security research and how ethics shaped research practice. Through this analysis of a technical research community, the proposed research will demonstrate how an ethical culture was developed and sustained in order to explore the limits of ethical self-regulation. It will identify the strengths and weaknesses of ethics self-regulation and draw upon ethical practices within computer security to inform other computing research communities. Project outcomes will contribute to ethics pedagogy for information and computing researchers and develop case studies for use by students and practitioners that demonstrate best practices for self-regulation.The proposed research will utilize multiple methods, including citation analysis, content analysis, and interviews, to illuminate and evaluate the ethical culture of computer security research. The project asks four questions: R1) How has the computer security community formed an ethical research culture? R2) How are ethics expectations communicated among researchers? R3) What sociotechnical factors support and challenge sustaining ethical practices? R4) How effective is ethical self-regulation in computer security research? The research will be conducted in four phases. Phase I will examine the development of ethics controversies and community responses through an analysis of key ethics moments in the last twenty years of computer security research through citation and discourse analysis. Phase II will interview diverse computer security researchers identified by the citation and discourse analysis to trace how the community developed and changed its approach to ethics over time. Phase III will conduct a stakeholder assessment of the strengths and weaknesses of ethical self-regulation in computer security research. Phase IV will create and evaluate educational case studies based on the empirical findings for students, as well as policy recommendations for conference review committees and researchers struggling to identify best practices for ethical computer security research.

计算机安全研究人员预防，发现和修复设备和网络基础设施中的缺陷，从而影响国家安全，商业实践，信息隐私和人身安全。 但是，这些研究人员还必须涉及道德困境，以了解如何使用大数据和共享网络资源来发现漏洞。如何安全地暴露这些问题；以及如何最好地确保固定关键漏洞。 这项拟议的研究将随着时间的推移分析计算机安全研究人员的学术话语和私人思考。目的是揭示有关人员，技术变化以及研究实践的变化的见解，塑造了安全研究中的道德文化以及道德规范如何塑造研究实践。 通过对技术研究界的分析，拟议的研究将证明如何发展和维持道德文化，以探索道德自我调节的局限性。 它将确定道德自我调节的优势和劣势，并借鉴计算机安全中的道德实践，以告知其他计算研究社区。 项目成果将为信息和计算研究人员的道德教学法做出贡献，并开发案例研究，以供学生和从业人员使用，以展示自我调节的最佳实践。拟议的研究将利用多种方法，包括引用分析，内容分析，访谈，访谈，访谈，照亮和评估计算机安全研究的道德文化。 该项目提出了四个问题：R1）计算机安全界如何形成道德研究文化？ R2）研究人员如何传达道德期望？ R3）哪些社会技术因素支持和挑战维持道德实践？ R4）道德自我调节在计算机安全研究中的有效性如何？该研究将分为四个阶段。 第一阶段将通过对计算机安全研究的关键伦理时刻进行分析通过引用和话语分析来研究道德争议和社区回应的发展。 第二阶段将通过引用和话语分析确定的不同计算机安全研究人员来追踪社区如何发展和改变其道德方法随着时间的流逝。 第三阶段将对计算机安全研究中道德自我调节的优势和劣势进行利益相关者评估。 第四阶段将根据学生的经验结果以及会议审查委员会的政策建议以及努力确定道德计算机安全研究的最佳实践的政策建议，创建和评估教育案例研究。

项目成果

From closed world discourse to digital utopianism: the changing face of responsible computing at Computer Professionals for Social Responsibility (1981–1992)

从封闭世界话语到数字乌托邦主义：社会责任计算机专业人员中负责任计算的变化（1981 年至 1992 年）

• DOI: 10.1080/24701475.2020.1725851
• 发表时间: 2020
• 期刊: Internet Histories
• 影响因子: 1.3
• 作者: Finn, Megan;DuPont, Quinn
• 通讯作者: DuPont, Quinn

Leveraging Citation Networks to Visualize Scholarly Influence Over Time

• DOI: 10.3389/frma.2017.00008
• 发表时间: 2016-11
• 期刊: Frontiers Res. Metrics Anal.
• 作者: Jason Portenoy;J. Hullman;Jevin D. West

Values and Ethics in Human-Computer Interaction

人机交互中的价值观和道德规范

• DOI: 10.1561/1100000073
• 发表时间: 2018
• 期刊: Foundations and Trends® in Human–Computer Interaction
• 作者: Shilton, Katie

Visualizing Scholarly Publications and Citations to Enhance Author Profiles

可视化学术出版物和引文以增强作者简介

• DOI: 10.1145/3041021.3053058
• 发表时间: 2017
• 期刊: WWW '17 Companion Proceedings of the 26th International Conference on World Wide Web Companion
• 作者: Portenoy, Jason;West, Jevin D.
• 通讯作者: West, Jevin D.