Scribd Logo
Загрузить

Добро пожаловать в Scribd!

  • Security Practice: Design, Adoption, and Use of Technology For Collaboratively Managing Sensitive Personal Information - Presentation

    Загружено:

    Laurian Vega
    41 просмотров14 страниц
    Abstract: There is a need in socio-technical systems, and more specifically medical informatics, to study how trust and privacy can affect the ad hoc negotiation of security rules and how they are managed in practice. For my interdisciplinary dissertation I propose to study how people collaboratively work to manage private information in the domains of childcare centers and physicians’ offices. These locations are places where private information is collected for multiple purposes (eg. tracking care, receiving payments). However, there has been little work that has examined how these needs are reflected or balanced in the acts of privacy. Building off of the preliminary work of observations and interviews, my approach to this topic is the use of mirrored ethnographies in each setting. The goal is to collect data on observed breakdowns in the policies for these groups. The data will be analyzed using a phenomenological approach to understand the experiences of security breakdowns: what was the cause, how breakdowns were responded to (e.g., bending policies, creating new policies), who was involved, and how privacy and security were maintained, or not maintained. Breakdowns may be as small as a file missing a piece of information, or as large as a missing child – as observed in preliminary studies. The outcomes from this work will be thick descriptions and categorizations of security system breakdowns along with near-future scenarios to depict aspects of future innovations. A goal of this work is to build on the literature in the areas of medical informatics and usable security in order to design prototypes in childcares and physician’s offices. The preliminary analysis has produced three loci where implicit and explicit norms influence security and privacy: (1) human-mediated access management explores how a filing cabinets and a computers location were physical situated and mediated by one person within each center, thereby negotiating access; (2) information duplication explores the role and use of having information in multiple forms and across distributed locations; and (3), community of trust explores how personnel coordinate and co-construct knowledge of the context to assess for nuances in polices. These findings and work represent novel and practical evaluations of security in context to look at factors related to security and privacy that affect technological adoption. Laurian Vega. “Security Practice: Design, Adoption, and Use of Technology for Collaboratively Managing Sensitive Personal Information” A Doctoral Consortium Presentation presented at AMIA 2010 Annual Symposium, November 13 - 17th, 2010, Washington DC.

    Оригинальное название

    Security Practice: Design, Adoption, and Use of Technology for Collaboratively Managing Sensitive Personal Information - Presentation

    Авторское право

    © Attribution Non-Commercial (BY-NC)

    Доступные форматы

    PDF, TXT или читайте онлайн в Scribd

    Этот документ был вам полезен?

    Это неприемлемый материал?

    Пожаловаться на этот документ
    Abstract: There is a need in socio-technical systems, and more specifically medical informatics, to study how trust and privacy can affect the ad hoc negotiation of security rules and how they are managed in practice. For my interdisciplinary dissertation I propose to study how people collaboratively work to manage private information in the domains of childcare centers and physicians’ offices. These locations are places where private information is collected for multiple purposes (eg. tracking care, receiving payments). However, there has been little work that has examined how these needs are reflected or balanced in the acts of privacy. Building off of the preliminary work of observations and interviews, my approach to this topic is the use of mirrored ethnographies in each setting. The goal is to collect data on observed breakdowns in the policies for these groups. The data will be analyzed using a phenomenological approach to understand the experiences of security breakdowns: what was the cause, how breakdowns were responded to (e.g., bending policies, creating new policies), who was involved, and how privacy and security were maintained, or not maintained. Breakdowns may be as small as a file missing a piece of information, or as large as a missing child – as observed in preliminary studies. The outcomes from this work will be thick descriptions and categorizations of security system breakdowns along with near-future scenarios to depict aspects of future innovations. A goal of this work is to build on the literature in the areas of medical informatics and usable security in order to design prototypes in childcares and physician’s offices. The preliminary analysis has produced three loci where implicit and explicit norms influence security and privacy: (1) human-mediated access management explores how a filing cabinets and a computers location were physical situated and mediated by one person within each center, thereby negotiating access; (2) information duplication explores the role and use of having information in multiple forms and across distributed locations; and (3), community of trust explores how personnel coordinate and co-construct knowledge of the context to assess for nuances in polices. These findings and work represent novel and practical evaluations of security in context to look at factors related to security and privacy that affect technological adoption. Laurian Vega. “Security Practice: Design, Adoption, and Use of Technology for Collaboratively Managing Sensitive Personal Information” A Doctoral Consortium Presentation presented at AMIA 2010 Annual Symposium, November 13 - 17th, 2010, Washington DC.

    Авторское право:

    Attribution Non-Commercial (BY-NC)
    Скачайте в формате PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    41 просмотров14 страниц

    Security Practice: Design, Adoption, and Use of Technology For Collaboratively Managing Sensitive Personal Information - Presentation

    Загружено:

    Laurian Vega
    Abstract: There is a need in socio-technical systems, and more specifically medical informatics, to study how trust and privacy can affect the ad hoc negotiation of security rules and how they are managed in practice. For my interdisciplinary dissertation I propose to study how people collaboratively work to manage private information in the domains of childcare centers and physicians’ offices. These locations are places where private information is collected for multiple purposes (eg. tracking care, receiving payments). However, there has been little work that has examined how these needs are reflected or balanced in the acts of privacy. Building off of the preliminary work of observations and interviews, my approach to this topic is the use of mirrored ethnographies in each setting. The goal is to collect data on observed breakdowns in the policies for these groups. The data will be analyzed using a phenomenological approach to understand the experiences of security breakdowns: what was the cause, how breakdowns were responded to (e.g., bending policies, creating new policies), who was involved, and how privacy and security were maintained, or not maintained. Breakdowns may be as small as a file missing a piece of information, or as large as a missing child – as observed in preliminary studies. The outcomes from this work will be thick descriptions and categorizations of security system breakdowns along with near-future scenarios to depict aspects of future innovations. A goal of this work is to build on the literature in the areas of medical informatics and usable security in order to design prototypes in childcares and physician’s offices. The preliminary analysis has produced three loci where implicit and explicit norms influence security and privacy: (1) human-mediated access management explores how a filing cabinets and a computers location were physical situated and mediated by one person within each center, thereby negotiating access; (2) information duplication explores the role and use of having information in multiple forms and across distributed locations; and (3), community of trust explores how personnel coordinate and co-construct knowledge of the context to assess for nuances in polices. These findings and work represent novel and practical evaluations of security in context to look at factors related to security and privacy that affect technological adoption. Laurian Vega. “Security Practice: Design, Adoption, and Use of Technology for Collaboratively Managing Sensitive Personal Information” A Doctoral Consortium Presentation presented at AMIA 2010 Annual Symposium, November 13 - 17th, 2010, Washington DC.

    Авторское право:

    Attribution Non-Commercial (BY-NC)
    Скачайте в формате PDF, TXT или читайте онлайн в Scribd
    Отметить как неприемлемый контент
    из 14

    Security Practice: Design, Adoption, and Use of Technology

    for Collaboratively Managing Sensitive Personal Information


    Laurian C. Vega
    Virginia Tech

    Monday, November 8, 2010


    Computer
    Science &
    Security

    Monday, November 8, 2010


    Computer
    Science &
    Security
    Adams, A. and M.A.
    Sasse, Users Are Not
    the Enemy, in
    Communications of
    the ACM. 1999. p.
    40-46.

    Monday, November 8, 2010


    Medical
    Informatics &
    Adoption of
    Electronic
    Records

    Monday, November 8, 2010


    Medical
    Informatics &
    Adoption of
    Electronic
    Records
    Berner, E.S., D.E. Detmer &
    D. Simborg, Will the Wave
    Finally Break? A Brief View
    of the Adoption of
    Electronic Medical Records
    in the United States. J Am
    Med Inform Assoc, 2005.
    12(1): p. 3-7.

    Monday, November 8, 2010


    Childcare Centers
    Monday, November 8, 2010
    Physician’s Offices
    Monday, November 8, 2010
    Research
    Question
    Ho w d o s o c i o - t e c h n i c a l
    systems that use sensitive
    personal information manage
    work-practice breakdowns
    surrounding the implicit and
    explicit rules of process?

    Monday, November 8, 2010


    Data & Method
    Location: Southwest-Virginia
    •Rural
    IRB Approved

    51 Interviewed Participants:
    • 13 Childcare Directors
    • 18 Medical Directors
    • 21 Parents
    121 hours of observations
    • 4 Childcares & 4 Physician’s
    offices
    •Notes, collected artifacts,
    pictures

    Monday, November 8, 2010


    Dissertation Outcomes
    A description and analysis of all
    observed and discussed
    breakdowns

    A set of future scenarios


    depicting abstractions of
    breakdowns

    Three themes discussed through


    scenarios:
    Community of security
    Security embodiment
    Zones of ambiguity

    Monday, November 8, 2010


    Discussion for AMIA

    What are the novel ways that this research can be applied and
    be useful for the AMIA community?

    Security and privacy, from my observations, have completely


    different meanings than how computer scientists think about
    them. How can these differing constructs be useful for AMIA?

    What alternative evaluation methods can be applied to my


    data to triangulate and generalize my findings?

    Monday, November 8, 2010


    Thank you
    Laurian Vega
    Department of Computer
    Science, Virginia Tech

    A special thanks to my committee: Steve


    Harrison, Deborha Tatar, Enid Montague,
    Dennis Kafura, and Scott McCrickard;
    and, Tom DeHart, Laura Agnich,
    Edgardo Vega, Zalia Shams, Monika
    Akbar, Stacy Branham, & Aubrey Baker
    who helped run, code, and analyze the
    data.

    Monday, November 8, 2010


    Photo Attribution
    Slide 1

    http://weblogs.jomc.unc.edu/ihc/wp-content/uploads/2010/04/
    electronic_medical_records.jpg

    SILK Information Systems: http://www.flickr.com/photos/36734051@N04/3385146885/

    http://www.corbisimages.com/Images/spacer.gif

    Slide 2

    formalfallacy @ Dublin: http://www.flickr.com/photos/formalfallacy/2057169454/

    Slide 11

    .penny: http://www.flickr.com/photos/44124468595@N01/14370954/

    Slide 17

    Simon Lieschke: http://www.flickr.com/photos/slieschke/226873460/

    Monday, November 8, 2010


    Method
    •Studying the world of the
    participants as an active - observer
    •The research findings are dependent
    on the interpretations of the
    researcher; researcher is the
    instrument
    •Research questions are open, and
    adaptive to upon deeper
    understanding of the research context
    •Data is captured in notes & rich
    descriptions, transcriptions, artifacts,
    memos of interpretation, audio
    recordings, etc
    •Data collection is never complete

    Monday, November 8, 2010

    Вам также может понравиться