Current Research Projects
Go to my homepage to see what I'm working on these days.
Past Projects
Internet users are increasingly being asked to make trust
decisions, and the consequences of a wrong decision can
lead to viruses, spyware, and identity theft. Our goal
is to understand how people make trust decisions, currently in
the context of phishing scams, and to develop user interfaces,
algorithms, and other support tools to help people make better
decisions. This work is funded by National Science
Foundation CCF-0524189
- Getting Users to Pay Attention to Anti-Phishing Education: Evaluation of Retention and Transfer (APWG eCrime 2007)
- User Interfaces and Algorithms for Fighting Phishing, a talk in August 2007 summarizing our work to date. An older version of this talk is available as a Google TechTalk.
- Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish (SOUPS2007)
- Anti-Phishing Phil game
- CANTINA: A Content-Based Approach to Detecting Phishing Web Sites (WWW2007)
- Protecting People from Phishing: The Design and Evaluation of an Embedded Training Email System (CHI 2007)
- Phinding Phish: An Evaluation of Anti-Phishing Toolbars (NDSS 2007)
This project is focused on capturing end-user security and
privacy policies in pervasive computing environments.
Our goal is to (1) develop novel user
interfaces, (2) weave learning, dialog, and
explanation technologies to minimize end-user burden, and
(3) conduct field studies to evaluate combinations of these
techniques. This work is funded by National Science Foundation Award CNS-0627513, NSF grant CNS-0433540, and ARO research grant DAAD19-02-1-0389 to Carnegie Mellon University's
CyLab, Portugal Telecom, France Telecom, Nokia, and IBM.
- Field Deployment of IMBuddy: A Study of Privacy Control and Feedback Mechanisms for Contextual IM (Ubicomp 2007)
- Understanding and Capturing People's Privacy Policies in a People Finder Application (Ubicomp 2007 Workshop on privacy)
- User-Controllable Privacy and Security for Pervasive Computing (HotMobile 2007)
inTouch: Awareness and Messaging for Mobile Groups
inTouch is a mobile social platform that helps small groups
(such as families, research work groups, carpools, etc)
coordinate. inTouch does this by providing shared awareness as
well as facilitating messaging and communication. inTouch also
aims to better address breakdowns that typically occur in
short-term planning and coordination. This work is funded by
National Science Foundation IIS-0534406
The goal of Marmite is to make it easy
to create "mashups" that combine content from
multiple web sites and web services. Marmite lets end-users
(1) extract content from web pages, (2) process it in
a data-flow manner, and (3) direct the output
to a variety of useful sinks, such as saving to a
database, displaying on a map, summarizing
as a chart, creating a custom web page, or
generating compilable source code that can be further edited.
Our user tests showed that people with spreadsheet
experience can create an equivalent of the Craigslist
housingmaps.com mashup in
about 15 minutes. This work is funded by
National Science Foundation IIS-0646526 and Microsoft SensorMap.
- Marmite screencast (QuickTime mov, 60megs)
- Making Mashups with Marmite: Towards End-User Programming for the Web (CHI 2007)
- Marmite: End-User Programming for the Web (CHI 2006 WIP)
Hitchhiking: Privacy-Sensitive Location-Based Services
Hitchhiking is a way of building a class of location-based
services in a privacy-sensitive manner. Bustle is an example
Hitchhiking application that can answer questions like "How busy
is it at the cafe?" and "How long are the lines at the airport?"
Bustle works by counting the number of wireless devices in an
area and using that count to estimate the number of people.
Topiary lets designers quickly design, prototype, and
test a location-enhanced app without requiring them to
implement it or deploy a supporting infrastructure,
enabling them to get feedback from real end-users
early in the design process.
The goal of Place Lab is to facilitate widespread adoption
of low-cost, easy-to-use location-enhanced computing at a
planetary scale and in a privacy-observant manner.
- Challenge: Ubiquitous Location-Aware Computing and the Place Lab Initiative (WMASH 2004)
- Privacy and Security in the Location-enhanced World Wide Web (Ubicomp 2003 Workshop)
Infrastructure support for privacy-sensitive
ubiquitous computing.
- An Architecture for Privacy-Sensitive Ubiquitous Computing Systems (PhD Dissertation) | Job Talk: PPT
- Privacy Risk Models for Designing Privacy-Sensitive Ubiquitous Computing Systems (DIS 2004) | Talk: PPT
- An Architecture for Privacy-Sensitive Ubiquitous Computing (Mobisys 2004) | Talk: PPT
- liquid: Context-Aware Distributed Queries (Ubicomp 2003) | Talk: PPT
- The Context Fabric: An Infrastructure for Context-Aware Computing | Talk: PPT
DENIM is a web site prototyping tool that lets you
sketch out web pages, draw hyperlinks between pages, and
interactively "run" sketches. Try clicking on the sketched
web page on the right to try out DENIM's HTML export.
- DENIM: An Informal Web Site Design Tool Inspired by Observations of Practice (Human-Computer Interaction 2002)
- DENIM: Finding a tighter fit between tools and practice for web site design (CHI 2000) | Talk: PPT
SATIN is a toolkit for building informal sketch-based
apps. SATIN provides libraries for manipulating ink,
interpreters for handling ink strokes, multiple views,
and semantic zooming. DENIM was created on top of SATIN.
- SATIN: A Toolkit for Informal Ink-based Applications (UIST 2000) | Talk: PPT
The Speakeasy project at PARC is investigating recombinant
computing, a new approach to interoperability. It allows
devices and services to use types of networked resources that
they have never seen before. It allows devices and services
that were not explicitly written to use one another to still
interoperate fluidly.
WebQuilt lets you run remote usability tests and then visualize
and analyze the data. The key is to make it easy to capture and
visualize the paths taken by tens and hundreds of people for cases
where the task is known.
Proactively delivering information based on your context.
SWAMI is a framework for running collaborative filtering
algorithms and evaluating the effectiveness of those
algorithms. It uses the EachMovie dataset, provided by Compaq
research.
The Open Shared Kalendaring Infrastructure is an extensible
calendaring infrastructure built on top of Ninja. Designed for
use with multiple information appliances, desktop apps, and
web apps, it provides both disconnected and connected access
to calendaring information compliant with vCalendar standards.
This project explored the integration of paper with digital
media thru games. Using software from Xerox, we could scan in
documents and recognize structures like checkboxes and freeform
sketch boxes. Our apps were MadLibs and CoverNotes, which turned
printer coversheets into the equivalent of message boards.
Cha-Cha is a system to contextualize search results by grouping
similar results in a hierarchy.
Conceptual ideas for a Personal Experience Capture System
Cyberguide is an interactive context-aware tourguide. It helps
people navigate and find points of interest, providing information
about the surrounding environment, such as the physical layout
of the local area and the current position of the user.

