Lorrie Cranor (Carnegie Mellon)- Passwords, Privacy Policies, and Potties: Using Research, Art, and Fashion to Inform Policy Makers and the Public
Abstract: As a privacy and security researcher interested in usability, I’ve conducted many studies to gain insights into how people make decisions related to their personal privacy, how people use security and privacy tools, and how we can make security and privacy tools easier to use. I will talk about my journey into public policy work and also discuss several security- and privacy-related research projects I’ve worked on over the past 25 years that had some impact on public policy discussions including research on the usability of privacy tools, the cost of reading privacy policies, various types of privacy and security labels, password policy, and the California privacy choice icon (that little blue stylized toggle that is showing up at the bottom of websites). I will also talk about ways I’ve used art, photos of bathrooms, and fashion design as a tool to help communicate about security and privacy concepts.
Speakers
Lorrie Cranor
Lorrie Faith Cranor (lorrie.cranor.org) is the Director and Bosch Distinguished Professor in Security and Privacy Technologies of CyLab and the FORE Systems University Professor of Computer Science and of Engineering and Public Policy at Carnegie Mellon University. She directs the CyLab Usable Privacy and Security Laboratory (CUPS) and co-directs the Privacy Engineering masters program. In 2016 she served as Chief Technologist at the US Federal Trade Commission. She is also a co-founder of Wombat Security Technologies, Inc, a security awareness training company that was acquired by Proofpoint. She has authored over 200 research papers on online privacy, usable security, and other topics. She founded the Symposium On Usable Privacy and Security (SOUPS) and co-founded the Conference on Privacy Engineering Practice and Respect (PEPR). She has served on a number of boards, including the Electronic Frontier Foundation Board of Directors, the Center for Democracy and Technology Board of Directors, the Electronic Privacy Information Center Advisory Board, the Computing Research Association Board of Directors, and the Aspen Institute Cybersecurity Group. She was elected to the ACM CHI Academy and named a Fellow of IEEE, ACM, and AAAS. She was previously a researcher at AT&T-Labs Research. She holds a doctorate in Engineering and Policy from Washington University in St. Louis. In 2012-13 she spent her sabbatical as a fellow in the Frank-Ratchye STUDIO for Creative Inquiry at Carnegie Mellon University where she where she worked on fiber arts projects, including a quilted visualization of bad passwords that was featured in Science Magazine as well as a bad passwords dress that she frequently wears when talking about her research. She plays soccer, walks to work, sews her own clothing with pockets, and tries not to embarrass her three young adult children.