{"type":"ScholarlyArticle","title":"Taking Situation-Based Privacy Decisions: Privacy Assistants Working with Humans","authors":[{"name":"Nadin Kökciyan","slug":"nadin-kokciyan","given":"Nadin","family":"Kokciyan","affiliation":"University of Edinburgh"},{"name":"Pinar Yolum","slug":"pinar-yolum","given":"Pinar","family":"Yolum","affiliation":"Utrecht University"}],"abstract":"Privacy on the Web is typically managed by giving consent to individual Websites for various aspects of data usage. This paradigm requires too much human effort and thus is impractical for Internet of Things (IoT) applications where humans interact with many new devices on a daily basis. Ideally, software privacy assistants can help by making privacy decisions in different situations on behalf of the users. To realize this, we propose an agent-based model for a privacy assistant. The model identifies the contexts that a situation implies and computes the trustworthiness of these contexts. Contrary to traditional trust models that capture trust in an entity by observing large number of interactions, our proposed model can assess the trustworthiness even if the user has not interacted with the particular device before. Moreover, our model can decide which situations are inherently ambiguous and thus can request the human to make the decision. We evaluate various aspects of the model using a real-life data set and report adjustments that are needed to serve different types of users well.","doi":"10.24963/ijcai.2022/99","url":"https://ijcai.org/proceedings/2022/99","pdf":"https://ijcai.org/proceedings/2022/0099.pdf","markdown":"https://ijcai.org/proceedings/2022/99.md","bibtex":"https://ijcai.org/proceedings/2022/bibtex/99","volume":{"slug":"2022","title":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","short_title":"IJCAI 2022","url":"https://ijcai.org/proceedings/2022/","year":2022,"location":"Vienna","dates":"23-29 July 2022","editors":"Luc De Raedt","isbn":"978-1-956792-00-3","publisher":"International Joint Conferences on Artificial Intelligence Organization","doi_prefix":"10.24963/ijcai.2022"},"section":"AI Ethics, Trust, Fairness","track":"Main Track","number":99,"pages":{"first":703,"last":709},"keywords":["AI Ethics, Trust, Fairness: Trustworthy AI","Multidisciplinary Topics and Applications: Security and Privacy","Agent-based and Multi-agent Systems: Applications"],"videos":[{"label":"Video #1","url":"https://slideslive.com/38987042","length_sec":75,"provider":"slideslive"},{"label":"Video #2","url":"https://slideslive.com/38985185","length_sec":668,"provider":"slideslive"}],"references":[{"position":1,"raw":"[Acquisti and Grossklags, 2005] Alessandro Acquisti and Jens Grossklags. Privacy and rationality in individual de- cision making. IEEE Secur. & Priv., 3(1):26-33, 2005.","title":"Privacy and rationality in individual decision making","authors":"Alessandro Acquisti, Jens Grossklags","year":"2005","venue":"IEEE Secur. & Priv","doi":null,"url":null,"internal_url":null},{"position":2,"raw":"[Ajmeri et al., 2020] Nirav Ajmeri, Hui Guo, Pradeep K. Murukannaiah, and Munindar P. Singh. Elessar: Ethics in norm-aware agents. In AAMAS, page 16-24, 2020.","title":"Elessar: Ethics in norm-aware agents","authors":"Nirav Ajmeri, Hui Guo, K Pradeep, Munindar P Murukannaiah, Singh","year":"2020","venue":"AAMAS","doi":null,"url":null,"internal_url":null},{"position":3,"raw":"[Alegre et al., 2016] Unai Alegre, Juan Carlos Augusto, and Tony Clark. Engineering context-aware systems and ap- plications: A survey. J. of Sys. and Soft., 117:55-83, 2016.","title":"Engineering context-aware systems and applications: A survey","authors":"Unai Alegre, Juan Carlos, Augusto, Tony Clark","year":"2016","venue":"J. of Sys. and Soft","doi":null,"url":null,"internal_url":null},{"position":4,"raw":"[Baarslag et al., 2017] Tim Baarslag, Alper T. Alan, Richard Gomer, Muddasser Alam, Charith Perera, Enrico Gerding, and m.c. schraefel. An automated negotiation agent for permission management. In AAMAS, page 380-390, 2017.","title":"An automated negotiation agent for permission management","authors":"Tim Baarslag, Alper T Alan, Richard Gomer, Muddasser Alam, Charith Perera, Enrico Gerding, M C Schraefel","year":"2017","venue":"AAMAS","doi":null,"url":null,"internal_url":null},{"position":5,"raw":"[Burnett et al., 2013] Chris Burnett, Timothy J Norman, and Katia Sycara. Stereotypical trust and bias in dynamic multiagent systems. ACM Tran. Intel. Sys. and Tech., 4(2):1-22, 2013.","title":"Stereotypical trust and bias in dynamic multiagent systems","authors":"Chris Burnett, Timothy J Norman, Katia Sycara","year":"2013","venue":"ACM Tran. Intel. Sys. and Tech","doi":null,"url":null,"internal_url":null},{"position":6,"raw":"[Chow, 2017] Richard Chow. The last mile for IoT privacy. IEEE Security & Privacy, 15(6):73-76, 2017.","title":"The last mile for IoT privacy","authors":"Richard Chow","year":"2017","venue":"IEEE Security & Privacy","doi":null,"url":null,"internal_url":null},{"position":7,"raw":"[Chung et al., 2017] Hyunji Chung, Michaela Iorga, Jeffrey Voas, and Sangjin Lee. Alexa, Can I trust you? IEEE Computer, 50(9):100-104, 2017.","title":"Alexa, Can I trust you","authors":"Chung","year":"2017","venue":"IEEE Computer","doi":null,"url":null,"internal_url":null},{"position":8,"raw":"[Colnago et al., 2020] Jessica Colnago, Yuanyuan Feng, Tharangini Palanivel, Sarah Pearman, Megan Ung, Alessandro Acquisti, Lorrie Faith Cranor, and Norman Sadeh. Informing the design of a personalized privacy as- sistant for the internet of things. In CHI, page 1-13, 2020.","title":"Informing the design of a personalized privacy assistant for the internet of things","authors":"Jessica Colnago, Yuanyuan Feng, Tharangini Palanivel, Sarah Pearman, Megan Ung, Alessandro Acquisti, Lorrie Faith Cranor, Norman Sadeh","year":"2020","venue":"CHI","doi":null,"url":null,"internal_url":null},{"position":9,"raw":"[Daidone et al., 2021] Federico Daidone, Barbara Carmi- nati, and Elena Ferrari. Blockchain-based privacy enforce- ment in the IoT domain. IEEE Tran. on Dep. & Secure Comp., 2021.","title":"Blockchain-based privacy enforcement in the IoT domain","authors":"Federico Daidone, Barbara Carminati, Elena Ferrari","year":"2021","venue":"IEEE Tran. on Dep. & Secure Comp","doi":null,"url":null,"internal_url":null},{"position":10,"raw":"[Das et al., 2018] Anupam Das, Martin Degeling, Daniel Smullen, and Norman Sadeh. Personalized privacy assis- tants for the internet of things: Providing users with notice and choice. IEEE Perv. Comp., 17(3):35-46, 2018.","title":"Personalized privacy assistants for the internet of things: Providing users with notice and choice","authors":"Anupam Das, Martin Degeling, Daniel Smullen, Norman Sadeh","year":"2018","venue":"IEEE Perv. Comp","doi":null,"url":null,"internal_url":null},{"position":11,"raw":"[Dey, 2001] Anind K Dey. Understanding and using context. Personal and Ubiquitous Computing, 5(1):4-7, 2001.","title":"Understanding and using context","authors":"K Anind, Dey","year":"2001","venue":"Personal and Ubiquitous Computing","doi":null,"url":null,"internal_url":null},{"position":12,"raw":"[Fang et al., 2018] Hui Fang, Jie Zhang, and Murat S ¸ensoy. A generalized stereotype learning approach and its instan- tiation in trust modeling. Electron. Commer. Res. Appl.. 30:149-158, 2018.","title":"A generalized stereotype learning approach and its instantiation in trust modeling","authors":"Hui Fang, Jie Zhang, Murat S ¸ensoy","year":"2018","venue":"Electron. Commer. Res. Appl","doi":null,"url":null,"internal_url":null},{"position":13,"raw":"[Fogues et al., 2017] Ricard L Fogues, Pradeep K Murukan- naiah, Jose M Such, and Munindar P Singh. SoSharP: Recommending sharing policies in multiuser privacy sce- narios. IEEE Int. Comp., 21(6):28-36, 2017.","title":"SoSharP: Recommending sharing policies in multiuser privacy scenarios","authors":"Ricard L Fogues, K Pradeep, Jose M Murukannaiah, Munindar P Such, Singh","year":"2017","venue":"IEEE Int. Comp","doi":null,"url":null,"internal_url":null},{"position":14,"raw":"[Jøsang et al., 2006] Audun Jøsang, Ross F Hayward, and Simon Pope. Trust network analysis with subjective logic. In Australasian CS Conf., pages 85-94, 2006.","title":"Trust network analysis with subjective logic","authors":"Audun Jøsang, Ross F Hayward, Simon Pope","year":"2006","venue":"Australasian CS Conf","doi":null,"url":null,"internal_url":null},{"position":15,"raw":"[Kökciyan and Yolum, 2017] Nadin Kökciyan and Pınar Yolum. Context-based reasoning on privacy in Internet of Things. In IJCAI, pages 4738-4744, 2017.","title":"Context-based reasoning on privacy in Internet of Things","authors":"Nadin Kökciyan, Pınar Yolum","year":"2017","venue":"IJCAI","doi":null,"url":null,"internal_url":"/proceedings/2017/660"},{"position":16,"raw":"[Kökciyan and Yolum, 2020] Nadin Kökciyan and Pınar Yolum. Turp: Managing trust for regulating privacy in Internet of Things. IEEE Int. Comp., 24(6):9-16, 2020.","title":"Turp: Managing trust for regulating privacy in Internet of Things","authors":"Nadin Kökciyan, Pınar Yolum","year":"2020","venue":"IEEE Int. Comp","doi":null,"url":null,"internal_url":null},{"position":17,"raw":"[Kurtan and Yolum, 2021] A Can Kurtan and Pınar Yolum. Assisting humans in privacy management: An agent-based approach. JAAMAS, 35(1):1-33, 2021.","title":"A Can Kurtan and Pınar Yolum. Assisting humans in privacy management: An agent-based approach","authors":"Yolum Kurtan","year":"2021","venue":"JAAMAS","doi":null,"url":null,"internal_url":null},{"position":18,"raw":"[Le and Mikolov, 2014] Quoc Le and Tomas Mikolov. Dis- tributed representations of sentences and documents. In ICML, pages 1188-1196, 2014.","title":"Quoc Le and Tomas Mikolov. Distributed representations of sentences and documents","authors":"Mikolov Le","year":"2014","venue":"ICML","doi":null,"url":null,"internal_url":null},{"position":19,"raw":"[Leon et al., 2013] Pedro Giovanni Leon, Blase Ur, Yang Wang, Manya Sleeper, Rebecca Balebako, Richard Shay, Lujo Bauer, Mihai Christodorescu, and Lorrie Faith Cra- nor. What matters to users? factors that affect users' will- ingness to share information with online advertisers. In SOUPS, pages 1-12, 2013.","title":"What matters to users? factors that affect users' willingness to share information with online advertisers","authors":"Pedro Giovanni Leon, Blase Ur, Yang Wang, Manya Sleeper, Rebecca Balebako, Richard Shay, Lujo Bauer, Mihai Christodorescu, Lorrie Faith Cranor","year":"2013","venue":"SOUPS","doi":null,"url":null,"internal_url":null},{"position":20,"raw":"[Liu and Datta, 2012] Xin Liu and Anwitaman Datta. Mod- eling context aware dynamic trust using hidden markov model. In AAAI, page 1938-1944, 2012.","title":"Modeling context aware dynamic trust using hidden markov model","authors":"Datta Liu, Xin Liu, Anwitaman Datta","year":"2012","venue":"AAAI","doi":null,"url":null,"internal_url":null},{"position":21,"raw":"[Mosca and Such, 2021] Francesca Mosca and Jose M. Such. ELVIRA: An explainable agent for value and utility- driven multiuser privacy. In AAMAS, page 916-924, 2021.","title":"ELVIRA: An explainable agent for value and utilitydriven multiuser privacy","authors":"Francesca Mosca, Jose M Such","year":"2021","venue":"AAMAS","doi":null,"url":null,"internal_url":null},{"position":22,"raw":"[Naeini et al., 2017] Pardis Emami Naeini, Sruti Bhagavat- ula, Hana Habib, Martin Degeling, Lujo Bauer, Lor- rie Faith Cranor, and Norman Sadeh. Privacy expectations and preferences in an IoT world. In SOUPS, 399-412, 2017.","title":"Privacy expectations and preferences in an IoT world","authors":"Pardis Emami Naeini, Sruti Bhagavatula, Hana Habib, Martin Degeling, Lujo Bauer, Lorrie Faith Cranor, Norman Sadeh","year":"2017","venue":"SOUPS","doi":null,"url":null,"internal_url":null},{"position":23,"raw":"[Nissenbaum, 2004] Helen Nissenbaum. Privacy as contex- tual integrity. Wash. L. Rev., 79:119, 2004.","title":"Privacy as contextual integrity","authors":"Helen Nissenbaum","year":"2004","venue":"Wash. L. Rev","doi":null,"url":null,"internal_url":null},{"position":24,"raw":"[Sapienza and Falcone, 2020] Alessandro Sapienza and Rino Falcone. Evaluating agents' trustworthiness within virtual societies in case of no direct experience. Cogn. Syst. Res., 64:164-173, 2020.","title":"Evaluating agents' trustworthiness within virtual societies in case of no direct experience","authors":"Alessandro Sapienza, Rino Falcone","year":"2020","venue":"Cogn. Syst. Res","doi":null,"url":null,"internal_url":null},{"position":25,"raw":"[Squicciarini et al., 2017] Anna Squicciarini, Cornelia Caragea, and Rahul Balakavi. Toward automated online photo privacy. ACM Tran. on the Web, 11(1):1-29, 2017.","title":"Toward automated online photo privacy","authors":"Anna Squicciarini, Cornelia Caragea, Rahul Balakavi","year":"2017","venue":"ACM Tran. on the Web","doi":null,"url":null,"internal_url":null},{"position":26,"raw":"[Teacy et al., 2012] WT Luke Teacy, Michael Luck, Alex Rogers, and Nicholas R Jennings. An efficient and ver- satile approach to trust and reputation using hierarchical Bayesian modelling. Artif. Intel., 193:149-185, 2012.","title":"An efficient and versatile approach to trust and reputation using hierarchical Bayesian modelling","authors":"Teacy","year":"2012","venue":"Artif. Intel","doi":null,"url":null,"internal_url":null},{"position":27,"raw":"[Ulusoy and Yolum, 2021] Onuralp Ulusoy and Pınar Yolum. PANOLA: A personal assistant for supporting users in preserving privacy. ACM Tran. on Int. Tech., 22(1), 2021.","title":"Onuralp Ulusoy and Pınar Yolum. PANOLA: A personal assistant for supporting users in preserving privacy","authors":"Yolum Ulusoy","year":"2021","venue":"ACM Tran. on Int. Tech","doi":null,"url":null,"internal_url":null},{"position":28,"raw":"[Utz et al., 2019] Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, and Thorsten Holz. (un) informed consent: Studying GDPR consent notices in the field. In ACM SIGSAC on Comp. and Comm. Sec., 973-990, 2019.","title":"un) informed consent: Studying GDPR consent notices in the field","authors":"Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz","year":"2019","venue":"ACM SIGSAC on Comp. and Comm. Sec","doi":null,"url":null,"internal_url":null},{"position":29,"raw":"[Voigt and Von dem Bussche, 2017] Paul Voigt and Axel Von dem Bussche. The EU General Data Protection Reg- ulation (GDPR): A Practical Guide, volume 10. 2017.","title":"The EU General Data Protection Regulation","authors":"Von Voigt, Paul Dem Bussche, Axel Voigt, Von Dem Bussche","year":"2017","venue":"GDPR): A Practical Guide","doi":null,"url":null,"internal_url":null},{"position":30,"raw":"[Wang and Singh, 2007] Yonghong Wang and Munindar P Singh. Formal trust model for multiagent systems. In IJ- CAI, volume 7, pages 1551-1556, 2007.","title":"Formal trust model for multiagent systems","authors":"Wang, Singh, Yonghong Wang, Munindar P Singh","year":"2007","venue":"IJ-CAI","doi":null,"url":null,"internal_url":"/proceedings/2007/250"}],"license_note":"Copyright International Joint Conferences on Artificial Intelligence."}