Privacy Risks Research Articles

Cybersecurity and defense in intelligent transportation systems

Intelligent Transportation Systems (ITS) have become increasingly crucial for enhancing transportation networks' efficiency, safety, and security. ITS includes advanced technologies such as electronic sensors, data transmission, and intelligent control technologies, providing better driver and rider services. However, these technologies pose significant security and privacy risks, in which attackers can easily disrupt transportation systems. This paper presents a survey of the challenges with ITS, the engineering requirements, attack challenges, and related work of securing ITS. This survey also discussed the elements of ITS, including advanced traffic management systems, connected and automated vehicles, intelligent infrastructure, and integrated data analytics, as well as the role of government policies, public-private partnerships, and stakeholder engagement. The aim is to look at present security challenges associated with ITS and provide better ways to the system. which is critical for creating smart cities and increasing the importance of individual and public transportation systems.

Does telemedicine hold the key for reproductive health care? A quantitative examination of women's intentions toward use and accurate information disclosure.

To investigate women's perceptions of telemedicine for reproductive health care services, focusing on how perceived benefits and privacy risks influence their intentions to adopt telemedicine and their willingness to disclose personal health information. A cross-sectional survey was conducted. The study applied the privacy calculus theory to the context of telemedicine for reproductive health, using adapted, validated variables to develop the survey. Outcome variables included intentions to adopt telemedicine and willingness to disclose accurate personal health information. Data were collected in May and June 2023 using Qualtrics online panel services, targeting women across the United States who had not used telemedicine for reproductive health. The sample comprised 847 women aged 18 and older. Structural equation modeling was employed using AMOS v28.0 to test the hypothesized relationships between perceived benefits, perceived risks, and adoption intentions. The analysis controlled for age, household income, political affiliation, religious views, and prior births. Perceived benefits were positively related to intention to adopt telemedicine for reproductive care (β: 0.600, p < 0.001), and willingness to disclose accurate personal health information (β: 0.453, p < 0.001). Unexpectedly, perceived privacy risks were positively related to adoption intentions (β: 0.128, p < 0.001), but negatively related to willingness to disclose (β: -0.282, p < 0.001). Intentions to adopt were positively associated with willingness to disclose (β: 0.089, p < 0.05). Lastly, older women and women located in states with abortion restrictions expressed lower intentions to adopt. The model explained 40.2% of variance in intention to adopt and 38.3% of variance in willingness to disclose. The study demonstrates the importance of perceived benefits and privacy risks in driving telemedicine adoption and disclosure intentions among women in the reproductive health context. These findings suggest the need for targeted strategies to address privacy concerns and support telemedicine adoption, particularly in restrictive regulatory environments.

Decentralized Machine Learning Framework for the Internet of Things: Enhancing Security, Privacy, and Efficiency in Cloud-Integrated Environments

The Internet of things (IoT) presents unique challenges for the deployment of machine learning (ML) models, particularly due to constraints on computational resources, the necessity for decentralized processing, and concerns regarding security and privacy in interconnected environments such as the Internet of cloud. In this paper, a novel decentralized ML framework is proposed for IoT environments characterized by wireless communication, dynamic data streams, and integration with cloud services. The framework integrates incremental learning algorithms with a robust decentralized model exchange protocol, ensuring that data privacy is preserved, while enabling IoT devices to participate in collaborative learning from distributed data across cloud networks. By incorporating a gossip-based communication protocol, the framework ensures energy-efficient, scalable, and secure model exchange, fostering effective knowledge sharing among devices, while addressing the potential security threats inherent in cloud-based IoT ecosystems. The framework’s performance was evaluated through simulations, demonstrating its ability to handle the complexities of real-time data processing in resource-constrained IoT environments, while also mitigating security and privacy risks within the Internet of cloud.

Light sensor based covert channels on mobile devices

The widespread adoption of light sensors in mobile devices has enabled functionalities that range from automatic brightness control to environmental monitoring. However, these sensors also present significant security and privacy risks within the Android ecosystem due to unrestricted access permissions. This paper explores how light sensor data can be used for covert communication through a novel, light-based out-of-band channel. We develop two approaches–Baseline and ResetBased–that use luminance values to encode and decode data. These methods tackle challenges that arise from data variability and the unpredictability of sensor event timings. To enhance data transmission accuracy, our methods employ a novel strategy for selecting luminance reference sequences and leverage mean-squared-error-based distance for decoding. Experimental results validate the effectiveness of our approaches and their potential for real-world applications.

Leveraging AI Tools for Discourse Analysis in Early Childhood Bilingual Education: Enhancing Language Development

The implementation of AI tools in education has become increasingly popular and brought transformative potential, particularly in the field of language education because of its powerful functions on designing immersive and personalized activities and offering real-time feedback. This study explores the role of AI tools in discourse analysis and the impact on enhancing bilingual skills among early childhood students. It investigates two key questions: (1) How do AI tools impact young childrens bilingual skills in early childhood classrooms? (2) How can discourse analysis of AI tools assist educators with bilingual teaching? A qualitative case study, including an in-depth interview with a bilingual educator, reveals insights into the effectiveness of AI tools in promoting bilingual language acquisition and engaging young learners in meaningful and enjoyable learning environment. Furthermore, the discourse analysis of AI tools offers immediate, actionable insights on each students academic performance, helping educators better understand the language learning process and the specific challenges students face. However, considerations and challenges of AI in education, such as privacy risks and misuse, still need to be considered. The findings of this study bridge the gap and highlight the potential for discourse analysis of AI tools in early childhood bilingual education. Further study can focus on exploring other AI tools in bilingual education and conducting long-term research with a large example size.

Backdoor Attacks in Peer-to-Peer Federated Learning

Most machine learning applications rely on centralized learning processes, opening up the risk of exposure of their training datasets. While federated learning (FL) mitigates to some extent these privacy risks, it relies on a trusted aggregation server for training a shared global model. Recently, new distributed learning architectures based on Peer-to-Peer Federated Learning (P2PFL) offer advantages in terms of both privacy and reliability. Still, their resilience to poisoning attacks during training has not been investigated. In this paper, we propose new backdoor attacks for P2PFL that leverage structural graph properties to select the malicious nodes, and achieve high attack success, while remaining stealthy. We evaluate our attacks under various realistic conditions, including multiple graph topologies, limited adversarial visibility of the network, and clients with non-IID data. Finally, we show the limitations of existing defenses adapted from FL and design a new defense that successfully mitigates the backdoor attacks, without an impact on model accuracy.

A multicenter bladder cancer MRI dataset and baseline evaluation of federated learning in clinical application

Bladder cancer (BCa), as the most common malignant tumor of the urinary system, has received significant attention in research on the clinical application of artificial intelligence algorithms. Nevertheless, it has been observed that certain investigations use data from various medical facilities to train models for BCa, which may pose a privacy risk. Given this concern, protecting patient privacy during machine learning algorithm training is a crucial aspect that requires substantial attention. One emerging machine learning paradigm that addresses this concern is federated learning (FL). FL enables multiple entities to collaboratively build machine learning models while preserving data privacy and security. In this study, we present a multicenter BCa magnetic resonance imaging (MRI) dataset. The dataset comprises 275 three-dimensional bladder T2-weighted MRI scans collected from four medical centers, and each scan includes diagnostic pathological labels for muscle invasion and pixel-level annotations of tumor contours. Four FL methods are used to assess the baseline of the dataset for both the task of diagnosing muscle-invasive bladder cancer and automatic bladder tumor lesion segmentation.

Feeling Safer Than Peers: Influence of Privacy-related Perceptions and Parental Mediation on Teen Tiktok Users’ Comparative Optimism about Privacy Risks

ABSTRACT This study investigates how privacy-related perceptions and parental mediation relate to teens’ comparative optimism about the privacy risks of TikTok, and the role of such optimism in teens’ privacy management on the platform. Our online survey of teen TikTok users residing in the U.S. revealed that those who were more concerned about privacy displayed less comparative optimism. Active parental mediation further enhanced this negative association between privacy concerns and comparative optimism. We also found that comparative optimism is negatively related to privacy-protecting behavior among teen users. Study findings guide youth-serving stakeholders in honing teens’ critical orientation toward social media privacy.

Understanding Privacy Risks of Intelligent Connected Vehicles Through Their Companion Mobile Apps

Understanding Privacy Risks of Intelligent Connected Vehicles Through Their Companion Mobile Apps

Intention to Use Leucorrheea Self-Test Innovation Kit and Collection Data through Mobile Application in Bangkok

Leukorrhea, or abnormal vaginal discharge (fungi, bacteria, and protozoa), can be indicated bacterial vaginosis or STIs. If not treated, these infections may lead to complications impacted fertility such as pelvic inflammatory disease (PID). Therefore, the goal is to develop a self-test kit for vaginal discharge detecting all three pathogens in one device. This study examines the acceptance of innovative technologies and factors affecting the intention to self-administered leucorrhoea test kits (SALTK) with results presentation and data transmission via mobile phones. Factors influencing such intention included technology acceptance (Technology Acceptance Model: TAM), facilitating conditions, social influence, and perceived privacy risk. The data were collected using an online Google Form questionnaire. A total of 450 valid questionnaires were used for analysis. The descriptive statistics employed in this study included percentage, means, and standard deviation, and the hypothesis was tested using multiple regression analysis. It was found that the factors impacting the intention to use SALTK with a statistical significance level of .05 were facilitating condition, social influence, perceived privacy risk, and three key technology acceptance components, namely perceived usefulness, perceived ease of use, and attitude toward using, respectively. SALTK modulates the beneficial for public health policies in Thailand and government agencies, the Food and Drug Administration and the Department of Disease Control, establishing prevention to reach the international standards.

Toward Context-Aware Privacy Enhancing Technologies for Online Self-Disclosure

Voluntary sharing of personal information is at the heart of user engagement on social media and central to platforms' business models. From the users' perspective, so-called self-disclosure is closely connected with both privacy risks and social rewards. Prior work has studied contextual influences on self-disclosure, from platform affordances and interface design to user demographics and perceived social capital. Our work takes a mixed-methods approach to understand the contextual information which might be integrated in the development of privacy-enhancing technologies. Through observational study of several Reddit communities, we explore the ways in which topic of discussion, group norms, peer effects, and audience size are correlated with personal information sharing. We then build and test a prototype privacy-enhancing tool that exposes these contextual factors. Our work culminates in a browser extension that automatically detects instances of self-disclosure in Reddit posts at the time of posting and provides additional context to users before they post to support enhanced privacy decision-making. We share this prototype with social media users, solicit their feedback, and outline a path forward for privacy-enhancing technologies in this space.

Protecting Infinite Data Streams from Wearable Devices with Local Differential Privacy Techniques

The real-time data collected by wearable devices enables personalized health management and supports public health monitoring. However, sharing these data with third-party organizations introduces significant privacy risks. As a result, protecting and securely sharing wearable device data has become a critical concern. This paper proposes a local differential privacy-preserving algorithm designed for continuous data streams generated by wearable devices. Initially, the data stream is sampled at key points to avoid prematurely exhausting the privacy budget. Then, an adaptive allocation of the privacy budget at these points enhances privacy protection for sensitive data. Additionally, the optimized square wave (SW) mechanism introduces perturbations to the sampled points. Afterward, the Kalman filter algorithm is applied to maintain data flow patterns and reduce prediction errors. Experimental validation using two real datasets demonstrates that, under comparable conditions, this approach provides higher data availability than existing privacy protection methods for continuous data streams.

Disclosing Personal Health Information to Emotional Human Doctors or Unemotional AI Doctors? Experimental Evidence Based on Privacy Calculus Theory

The commercialization of artificial intelligence (AI) in healthcare is accelerating, yet academic research on its users remains scarce. To what extent are they willing to disclose personal health privacy to AI doctors compared to traditional human doctors? What factors are shaping these decisions? The lack of user research has left these questions unanswered. This article, based on privacy calculus theory, conducted a multi-factorial between-subjects online experiment (N = 582) with a 2 (medical provider: AI vs. human) × 2 (emotional support: low vs. high) × 2 (information sensitivity: low vs. high) design. The results indicated that AI doctors lead participants to perceive both lower health benefits and privacy risks. Emotional support is not always beneficial. On one hand, high emotional support can provide patients with more health benefits, but on the other hand, it also poses higher levels of privacy risks. Additionally, high emotional support responses from AI doctors could enhance patients’ health benefits, trust, and willingness to disclose health privacy, while the opposite was observed for human doctors.

Exploring college students' risk perception and acceptance intention of facial recognition technology in China

In response to China’s ‘smart campus’ trend, facial recognition technology (FRT) in higher education has evolved from identification to emotion recognition, raising various risks and controversies. Understanding college students’ perceptions is key to addressing these concerns and facilitating AI integration. This study extends the Unified Theory of Acceptance and Use of Technology (UTAUT) model to gauge students’ attitudes towards FRT, introducing three new constructs: ‘personal innovativeness,’ ‘trust in the system,’ and ‘perceived risks.’ Results show that students’ personal innovativeness and trust in the system positively relate to their acceptance intention. Trust in FRT is hindered by perceived privacy, psychological, and performance risks, while perceived social risks are insignificant. Higher education shows less resistance to FRT due to normalized campus surveillance. Compared to Western societies, Chinese students’ Confucian cultural stance of ‘harmony but not uniformity’ reduces concerns about racial or religious discrimination from FRT. These findings are crucial for assessing FRT’s necessity and legality in higher education and devising risk mitigation strategies.

Weighing user's privacy calculus on personal information disclosure: the moderating effect of social media identification

PurposeWith the widespread collection and utilization of user data, privacy security has become a crucial factor influencing online engagement. In response to the growing concern about privacy security issues on social media, this research aims to examine the key causes of social media users' privacy calculus and how the balance between perceived privacy risks and benefits affects users' privacy concerns and their subsequent willingness to disclose personal information.Design/methodology/approachThe characteristics of the privacy calculus were extracted through partially structured interviews. A research model derived from privacy calculus theory was constructed, and latent variable modeling was employed to validate the proposed hypotheses.FindingsInformation sensitivity, experiences of privacy violations, social influence and the effectiveness of privacy policies influence users' privacy calculus. Privacy risk positively influences privacy concerns. Personal information disclosure willingness is positively influenced by privacy benefits and negatively influenced by privacy concerns, with both paths moderated by social media identification.Originality/valueThis study explores the key antecedents of users' privacy calculus and how these factors influence privacy concerns and subsequent willingness to disclose information on social media. It offers new insights into the privacy paradox observed within social media by validating the moderating role of social media identification on users' information disclosure willingness.

Applied Ethical and Explainable AI in Adversarial Deepfake Detection: From Theory to Real-World Systems

Deepfake technology is advancing by the minute. This gives rise to increased privacy, trust and security risks. Such technology can be used for malicious activities like manipulating public opinion and spreading misinformation using social media. Adversarial machine learning techniques seem to be a strong defense in detecting and flagging deepfake content. But the challenge with practical use of many deepfake detection models is that they operate as black-boxes with little transparency or accountability in their decisions. This paper proposes a framework and guidelines to integrate ethical AI and explainable AI (XAI) - specifically techniques like SHAP and LIME, to make deepfake detection systems more transparent and trustworthy. We will propose guidelines to incorporate techniques which will make deepfake detection systems more accountable and explainable such that they make deepfake detection systems seamlessly deployable in the real world.

That uncanny valley of mind: when anthropomorphic AI agents disrupt personalized advertising

This research, grounded in privacy calculus theory, examines how the anthropomorphization of AI agents affects consumers’ perceptions of privacy risks associated with personalized ads. Specifically, it explores strategies to reduce potential negative impacts. In Study 1, participants expressed concerns that highly anthropomorphized chatbots might possess human-like autonomous intentions to misuse personal data, a phenomenon referred to as the ‘uncanny valley of mind’. In contrast, participants felt more secure, in control, and less concerned about privacy when interacting with a mechanized, less human-like chatbot. To address this backfiring effect, Study 2 explored the role of algorithmic disclosure – where companies provide transparent information about the underlying algorithms, data handling procedures, and personalization criteria. This strategy effectively mitigated privacy concerns, thereby preventing the negative effects associated with highly anthropomorphized AI chatbots. These findings offer valuable insights for marketers utilizing AI chatbots to craft effective, personalized messages based on social media data.

Pioneering new paths: the role of generative modelling in neurological disease research.

Recently, deep generative modelling has become an increasingly powerful tool with seminal work in a myriad of disciplines. This powerful modelling approach is supposed to not only have the potential to solve current problems in the medical field but also to enable personalised precision medicine and revolutionise healthcare through applications such as digital twins of patients. Here, the core concepts of generative modelling and popular modelling approaches are first introduced to consider the potential based on methodological concepts for the generation of synthetic data and the ability to learn a representation of observed data. These potentials will be reviewed using current applications in neuroimaging for data synthesis and disease decomposition in Alzheimer's disease and multiple sclerosis. Finally, challenges for further research and applications will be discussed, including computational and data requirements, model evaluation, and potential privacy risks.

Contrastive Learning based Speech Spoofing Detection for Multimedia Security in Edge Intelligence

Artificial intelligence (AI) empowered edge computing has given rise to a new paradigm and effectively facilitated the promotion and development of multimedia applications. The speech assistant is one of the significant services provided by multimedia applications, which aims to offer intelligent interactive experiences between humans and machines. However, malicious attackers may exploit spoofed speeches to deceive speech assistants, posing great challenges to the security of multimedia applications. The limited resources of multimedia terminal devices hinder their ability to effectively load speech spoofing detection models. Furthermore, processing and analyzing speech in the cloud can result in poor real-time performance and potential privacy risks. Existing speech spoofing detection methods rely heavily on annotated data and exhibit poor generalization capabilities for unseen spoofed speeches. To address these challenges, this paper first proposes the Coordinate Attention Network (CA2Net) that consists of coordinate attention blocks and Res2Net blocks. CA2Net can simultaneously extract temporal and spectral speech feature information and represent multi-scale speech features at a granularity level. Besides, a contrastive learning-based speech spoofing detection framework named GEMINI is proposed. GEMINI can be effectively deployed on edge nodes and autonomously learn speech features with strong generalization capabilities. GEMINI first performs data augmentation on speech signals and extracts conventional acoustic features to enhance the feature robustness. Subsequently, GEMINI utilizes the proposed CA2Net to further explore the discriminative speech features. Then, a tensor-based multi-attention comparison model is employed to maximize the consistency between speech contexts. GEMINI continuously updates CA2Net with contrastive learning, which enables CA2Net to effectively represent speech signals and accurately detect spoofed speeches. Extensive experiments on the ASVspoof2019 dataset show that GEMINI reduces the Equal Error Rate and tandem Detection Cost Function by up to 96.75% and 96.35% in the physical access scenario, and by up to 86.62% and 87.71% in the logical access scenario compared to peer methods.

Safeguarding Personal Identifiable Information (PII) after Smartphone Pairing with a Connected Vehicle

The integration of connected autonomous vehicles (CAVs) has significantly enhanced driving convenience, but it has also raised serious privacy concerns, particularly regarding the personal identifiable information (PII) stored on infotainment systems. Recent advances in connected and autonomous vehicle control, such as multi-agent system (MAS)-based hierarchical architectures and privacy-preserving strategies for mixed-autonomy platoon control, underscore the increasing complexity of privacy management within these environments. Rental cars with infotainment systems pose substantial challenges, as renters often fail to delete their data, leaving it accessible to subsequent renters. This study investigates the risks associated with PII in connected vehicles and emphasizes the necessity of automated solutions to ensure data privacy. We introduce the Vehicle Inactive Profile Remover (VIPR), an innovative automated solution designed to identify and delete PII left on infotainment systems. The efficacy of VIPR is evaluated through surveys, hands-on experiments with rental vehicles, and a controlled laboratory environment. VIPR achieved a 99.5% success rate in removing user profiles, with an average deletion time of 4.8 s or less, demonstrating its effectiveness in mitigating privacy risks. This solution highlights VIPR as a critical tool for enhancing privacy in connected vehicle environments, promoting a safer, more responsible use of connected vehicle technology in society.