Experiences with Ethical Committees for Computer Science Jeroen - PowerPoint PPT Presentation

Experiences with Ethical Committees for Computer Science Jeroen van der Ham University of Amsterdam <jeroen@os3.nl>

Taxis and Rainbows

Taxis and Rainbows medallion,hack_license,vendor_id,rate_code,store_a nd_fwd_flag,pickup_datetime,dropoff_datetime,passe nger_count,trip_time_in_secs 6B111958A39B24140C973B262EA9FEA5, D3B035A03C8A34DA17488129DA581EE7 D3B035A03C8A34DA17488129DA581EE7, VTS,5,,2013-12-03 15:46:00,2013-12-03 16:47:00,1,3660,22.71,-73.813927,40.698135,-74.093307,40 .829346 MD5 of 6-digit number https://medium.com/@vijayp/of-taxis-and-rainbows-f6bc289679a1

Facebook Study

Facebook Study • Facebook studied emotional timeline filtering • Facebook allowed researchers to run analyses • IRB was not involved http://m.theatlantic.com/technology/archive/2014/06/everything-we-know-about-facebooks-secret-mood- manipulation-experiment/373648/

Internet Census 2012

Internet Census 2012 • Carna botnet scanned entire Internet using vulnerable devices • Full Disclosure dump of Carna botnet http://internetcensus2012.bitbucket.org/paper.html http://www.sigcomm.org/sites/default/files/ccr/papers/2014/July/0000000-0000013.pdf

ThePirateBayWatch

ThePirateBayWatch • Measuring the impact of TPB website blockade • Collected IP addresses of Bittorrent users • Ethical analysis together with ethicist https://staff.fnwi.uva.nl/j.j.vanderham/research/publications/1404-EthicalConsiderationsTPB.pdf

Ethical Committee • UvA System and Network Engineering Master • Security research is highly valued in the field • Projects in courses throughout the year • coded green, yellow, orange, red https://www.os3.nl/2014-2015/info/ethics

Ethical Committee • 2 courses (“Offensive Technologies” & “Computer Crime & Forensics”): • 17 Green • 4 Yellow • 6 Orange • 1 Red • Result: 12 Responsible Disclosure procedures

Ethics Cooperation Ethics in data sharing: developing a model for best practice Sven Dietrich ∗ , Jeroen van der Ham † , Aiko Pras ‡ , Roland van Rijswijk-Deij § , Darren Shou ¶ , Anna Sperotto ‡ , Aimee van Wynsberghe ‡ , Lenore D. Zuck ∗∗ • Dagstuhl participants ∗ Computer Science Department Stevens Institute of Technology, Hoboken, NJ, USA spock@cs.stevens.edu † Faculty of Science, Informatics Institute University of Amsterdam, Amsterdam, The Netherlands vdham@uva.nl ‡ Centre for Telematics and Information Technology (CTIT) University of Twente, Enschede, The Netherlands a.pras,a.sperotto,A.L.vanWynsberghe@utwente.nl • CREDS workshop paper § SURFnet bv Utrecht, The Netherlands rijswijk@surfnet.nl ¶ Symantec Research Labs Culver City, CA, USA darren shou@symantec.com ∗∗ Computer Science Department University of Illinois at Chicago, Chicago, IL, USA lenore@cs.uic.edu • Data Sharing WG - SURFnet • Ongoing collaboration with A. van Wynsberghe