AP4L: Adaptive PETs to Protect & emPower People during Life Transitions
Lead Research Organisation:
University of Surrey
Department Name: Computing Science
Abstract
AP4L is a 3-year program of interdisciplinary research, centring on the online privacy & vulnerability challenges that people face when going through major life transitions. Our central goal is to develop privacy-by-design technologies to protect & empower people during these transitions. Our work is driven by a narrative that will be familiar to most people. Life often "just happens", leading people to overlook their core privacy and online safety needs. For instance, somebody undergoing cancer treatment may be less likely to finesse their privacy setting on social media when discussing the topic. Similarly, an individual undergoing gender transition may be unaware of how their online activities in the past may shape the treatment into the future. This project will build the scientific and theoretical foundations to explore these challenges, as well as design and evaluate three core innovations that will address the identified challenges. AP4L will introduce a step-change, making online safety and privacy as painless and seamless as possible during life transitions
To ensure a breadth of understanding, we will apply these concepts to four very different transitions through a series of carefully designed co-creation activities, devised as part of a stakeholder workshop held in Oct'21. These are relationship breakdowns; LBGT+ transitions or transitioning gender; entering/ leaving employment in the Armed Forces; and developing a serious illness or becoming terminally ill. Such transitions can significantly change privacy considerations in unanticipated or counter-intuitive ways. For example, previously enabled location-sharing with a partner may lead to stalking after a breakup; 'coming out' may need careful management across diverse audiences (e.g - friends, grandparents) on social media.
We will study these transitions, following a creative security approach, bringing together interdisciplinary expertise in Computer Science, Law, Business, Psychology and Criminology.
We will systematise this knowledge, and develop fundamental models of the nature of transitions and their interplay with online lives. These models will inform the development of a suite of technologies and solutions that will help people navigate significant life transitions through adaptive, personalised privacy-enhanced interventions that meet the needs of each individual and bolster their resilience, autonomy, competence and connection. The suite will comprise:
(1) "Risk Playgrounds", which will build resilience by helping users to explore potentially risky interactions of life transitions with privacy settings across their digital footprint in safe ways
(2) "Transition Guardians", which will provide real-time protection for users during life transitions.
(3) "Security Bubbles", which will promote connection by bringing people together who can help each other (or who need to work together) during one person's life transition, whilst providing additional guarantees to safeguard everyone involved.
In achieving this vision, and as evidenced by £686K of in-kind contributions, we will work with 26 core partners spanning legal enforcement agencies (e.g., Surrey Police), tech companies (e.g., Facebook, IBM), support networks (e.g., LGBT Foundation, Revenge Porn Helpline) and associated organisations (e.g., Ofcom, Mastercard, BBC). Impact will be delivered through various activities including a specially commissioned BBC series on online life transitions to share knowledge with the public; use of the outputs of our projects by companies & social platforms (e.g., by incorporating into their products, & by designing their products to take into consideration the findings of our project) & targeted workshops to enable knowledge exchange with partners & stakeholders.
To ensure a breadth of understanding, we will apply these concepts to four very different transitions through a series of carefully designed co-creation activities, devised as part of a stakeholder workshop held in Oct'21. These are relationship breakdowns; LBGT+ transitions or transitioning gender; entering/ leaving employment in the Armed Forces; and developing a serious illness or becoming terminally ill. Such transitions can significantly change privacy considerations in unanticipated or counter-intuitive ways. For example, previously enabled location-sharing with a partner may lead to stalking after a breakup; 'coming out' may need careful management across diverse audiences (e.g - friends, grandparents) on social media.
We will study these transitions, following a creative security approach, bringing together interdisciplinary expertise in Computer Science, Law, Business, Psychology and Criminology.
We will systematise this knowledge, and develop fundamental models of the nature of transitions and their interplay with online lives. These models will inform the development of a suite of technologies and solutions that will help people navigate significant life transitions through adaptive, personalised privacy-enhanced interventions that meet the needs of each individual and bolster their resilience, autonomy, competence and connection. The suite will comprise:
(1) "Risk Playgrounds", which will build resilience by helping users to explore potentially risky interactions of life transitions with privacy settings across their digital footprint in safe ways
(2) "Transition Guardians", which will provide real-time protection for users during life transitions.
(3) "Security Bubbles", which will promote connection by bringing people together who can help each other (or who need to work together) during one person's life transition, whilst providing additional guarantees to safeguard everyone involved.
In achieving this vision, and as evidenced by £686K of in-kind contributions, we will work with 26 core partners spanning legal enforcement agencies (e.g., Surrey Police), tech companies (e.g., Facebook, IBM), support networks (e.g., LGBT Foundation, Revenge Porn Helpline) and associated organisations (e.g., Ofcom, Mastercard, BBC). Impact will be delivered through various activities including a specially commissioned BBC series on online life transitions to share knowledge with the public; use of the outputs of our projects by companies & social platforms (e.g., by incorporating into their products, & by designing their products to take into consideration the findings of our project) & targeted workshops to enable knowledge exchange with partners & stakeholders.
Organisations
- University of Surrey (Lead Research Organisation)
- Information Commissioner's Office (Collaboration)
- Mishcon De Reya (Collaboration)
- Mastercard Inc (Global) (Project Partner)
- Surrey Constabulary (Project Partner)
- Maggie Keswick Jencks Cancer Ctrs Trust (Project Partner)
- LGBT Foundation (Project Partner)
- Revenge Porn Helpline (Project Partner)
- Marie Curie (Project Partner)
- Ofcom (Project Partner)
- Cybsafe Limited (Project Partner)
- The Officers Association Scotland (Project Partner)
- Church of Scotland (Project Partner)
- Consult Hyperion (Project Partner)
- Facebook UK (Project Partner)
- Airmic Ltd (Project Partner)
- Yoti Ltd (Project Partner)
- SKO Family Law Specialists LLP (Project Partner)
- The Security Consultancy Limited (Project Partner)
- Macmillan Cancer Support (Project Partner)
- CGI IT UK Ltd (Project Partner)
- Cloudflare (Project Partner)
- Lloyds Banking Group (Project Partner)
- Internet Watch Foundation (Project Partner)
- Stop Hate UK (Project Partner)
- IBM (United Kingdom) (Project Partner)
- SICSA (Project Partner)
- The British Broadcasting Corporation (BBC) (Project Partner)
- Surrey Police (Project Partner)
Publications
Agarwal V
(2022)
"Way back then": A Data-driven View of 25+ years of Web Evolution
Agarwal V
(2024)
Decentralised Moderation for Interoperable Social Networks: A Conversation-Based Approach for Pleroma and the Fediverse
in Proceedings of the International AAAI Conference on Web and Social Media
Alkaldi N
(2022)
MIGRANT Modeling Smartphone Password Manager Adoption using Migration Theory
in ACM SIGMIS Database: the DATABASE for Advances in Information Systems
Alkhariji L
(2023)
Semantics-based privacy by design for Internet of Things applications
in Future Generation Computer Systems
Anaobi I
(2023)
Will Admins Cope? Decentralized Moderation in the Fediverse
Anaobi I
(2023)
Will Admins Cope? Decentralized Moderation in the Fediverse
Balduf L
(2024)
Looking AT the Blue Skies of Bluesky
| Description | We brought together a large interdisciplinary team of over 35 people to address these goals from different disciplinary perspectives, ranging from human factors, behavioural science and psychology to criminology and computer science. Six UK universities (Cambridge, Edinburgh, Edgehill, Queen Mary University of London, Strathclyde and Surrey) were involved. The project was divided into three workstreams, but with much collaboration and crossover between each workstream. We started from a human factors angle, with one of the largest-ever online surveys (over 400 people) of this population, followed by intimate in-person workshops to draw out nuances and build on survey findings and provide in-depth real-life experiences. Based on the insights gained from this human-factors exploration, AP4L project set out to develop three families of tools/innovations (See pages 10-14): Risk Playgrounds, to build resilience by helping people to explore potentially risky interactions of life transitions with privacy settings across their digital footprint in safe ways. Individuals can play around within the Risk Playground with different scenarios related to their life transition in a safe and secure environment to experience how different approaches online could affect them. Transition Guardians, to provide real-time protection for users during life transitions. The success of Transition Guardians hinges on balancing between hampering the user's online experience through overprotection and creating risk through underprotection, whilst promoting a false sense of security. This balance will vary for each individual user and life transition. Security Bubbles, to promote connection by bringing people together who can help each other, or who need to work together, during one person's life transition, while providing additional guarantees to safeguard everyone involved. The idea of a Security Bubble is inspired from the COVID Support Bubble, which connected different households to provide support during the challenging times of the pandemic. On similar lines, a Security Bubble connects people with similar experiences and expertise to provide support in a privacy-preserving and secure way. In our data-driven world, we need not turn too far to find examples of bad behaviour. We also did largescale data analysis to capture some of the difficult online harms people experience and also to do a quantitative comparison of mitigation techniques, such as decentralised content moderation. From the beginning, our goal has not only been to conduct world leading research but also to have tangible real world impact. In this regard, we have been extremely lucky to work alongside our 23 project partners, including LGBT Foundation, Lloyds Banking Group, Macmillan, Maggie's Centres, Marie Curie, Ofcom, Officers Association Scotland, Stop Hate UK, Revenge Porn Helpline. As well as offering general advice, our charity partners have helped to recruit participants for the surveys and workshops, and with the correct and current language to use within the LGBTQI+ community. Our Industry Partners have participated in interviews and shared information on how they keep their clients safe online and what they would benefit from going forward. Our Policy partners have helped shape the tools we are developing and how they would be used in a real world scenario. |
| Exploitation Route | The tools we have created are open source and will be available for use and adaptable to other life transitions |
| Sectors | Communities and Social Services/Policy Digital/Communication/Information Technologies (including Software) Healthcare Government Democracy and Justice Security and Diplomacy |
| Description | The AP4L project has created insights and developed flexible cybersecurity solutions by bringing together diverse perspectives and expertise. By combining knowledge from fields such as human factors, behavioural science and psychology, criminology and computer science, the AP4L project has addressed the evolving and complex challenges in cybersecurity. This collaborative approach has had an impact beyond the parameters of the project remit, and we are proud to share some of the impacts the project has achieved. AP4L developed the following tools which are all open source and available for use by the general public: ? Open source tool for data collection from the Fediverse (Mastodoner) ? Open source browser tool for detecting and flagging accidental self-disclosure (Insight Watcher) ? Risk Playground Tool ? SecureWhispers - Android App for covert and secure communication Two AP4L Co-Investigators secured follow-on funding. Prof. Alice Hutchings at Cambridge University was awarded a Google Academic Research Award. And Prof. Wendy Moncur at Strathclyde University was awarded a REPHRAIN grant for Legal Challenges in the Emergent Use of Text-based Generative AI for UK Research. AP4L Co-Investigators also had some media appearances, with Cambridge University's Prof. Alice Hutchings appearing on Start the Week on BBC Radio 4. Amongst other print media appearances, Dr. Ignacio Castro from Queen Mary University London did two interviews with Spanish publication El Pais. Prof. Wendy Moncur from University of Strathclyde did an interview for Nature on Guidelines for academics aim to lessen ethical pitfalls in generative-AI use. As well as appearing on nine radio and news programmes, with the majority of appearances on the BBC, AP4L PI Prof. Nishanth Sastry (University of Surrey) provided his expertise on the ITV Documentary on Brianna Ghey and social media use on children. Dr. Mike McGuire from University of Surrey and Prof. Karen Renaud from University of Strathclyde collaborated on a paper on the Sub Post Master Post Office Scandal that was used as evidence in the House of Commons by the Father of the House Sir Peter Bottomley: https://youtu.be/ GH9jyCnJI1M?si=yLeQqiTNYOaaObrZ&t=27 Our Co-Investigators and Pre and Post Doc Researchers have also been very busy over the last 3 years and have produced an impressive 45 papers, including 20 A and A* rated, one book chapter, nine talks/presentations/poster presentations, as well as delivering five keynote addresses at leading conferences. The AP4L project has not only advanced cybersecurity research, but also demonstrated the power of interdisciplinary collaboration in addressing complex security challenges. With contributions from various fields, the project has made significant strides in improving both the understanding and practical solutions for cybersecurity. The ongoing impact of the project is evident through the follow-on funding, media recognition, and the array of tools, research papers, and presentations. |
| First Year Of Impact | 2022 |
| Sector | Government, Democracy and Justice,Security and Diplomacy |
| Impact Types | Cultural Societal Policy & public services |
| Description | ICO |
| Organisation | Information Commissioner's Office |
| Country | United Kingdom |
| Sector | Public |
| PI Contribution | We have discussed with ICO the potential for PETs to be used in life transitions |
| Collaborator Contribution | ICO have offered to do joint case studies with us for relevant PETs we develop |
| Impact | None yet |
| Start Year | 2023 |
| Description | Mission de Reya LLP |
| Organisation | Mishcon De Reya |
| Country | United Kingdom |
| Sector | Private |
| PI Contribution | We have started to engage with Mishcon about understanding relationship breakdowns and privacy concerns therein |
| Collaborator Contribution | Mishcon have contributed a potential use case of high net-worth elderly individuals who lose a spouse and suddenly come into lot of money as inheritance, but do not have prior experience managing their finances. This creates new privacy problems in their lives which we will look to address in partnership. |
| Impact | No outputs yet |
| Start Year | 2023 |
| Description | An Email Dataset for Analyzing Large-Group Decision-Making |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Postgraduate students |
| Results and Impact | The talk presented a novel dataset and how can it be used by other parties. This sparked questions, potential future collaborations and general interest in using this dataset |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://sites.google.com/view/icwsm2023datachallenge/home |
| Description | Decentralising social networks? An in-depth analysis of Bluesky |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Postgraduate students |
| Results and Impact | About 50 PhD students, postdocs, and faculty members attended the talk. The talk informed their views and changed their perspectives on recent social media developments |
| Year(s) Of Engagement Activity | 2025 |
| URL | https://networks.imdea.org/whatsnew/events-agenda/decentralising-social-networks-an-in-depth-analysi... |
| Description | Internet Global Forum presentation |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Policymakers/politicians |
| Results and Impact | Presentation at the IGF which resulted in an interesting debate with the audience on the relevance of the topic and how to bridge the gap of understanding across the multiple stakeholders |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://dig.watch/?post_type=event&p=149752 |
| Description | Keynote - Graphs as a powerful abstraction for Protecting & Empowering People Online |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Postgraduate students |
| Results and Impact | Keynote at a conference/symposium/ workshop. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://60th-kis2023.kait.jp/ |
| Description | Keynote - Making Imaging Data Meaningful: Lessons from Social Media |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Postgraduate students |
| Results and Impact | Keynote at a conference/symposium/ workshop. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://60th-kis2023.kait.jp/ |
| Description | Keynote Talk - Enterprise Knowledge Graphs Using Large Language Models |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Industry/Business |
| Results and Impact | Keynote at a conference/symposium/ workshop |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://wsl.iiitb.ac.in/cikm-2023-keynote-talks |
| Description | Keynote Talk - SocialSec 2023: 9th International Symposium on Security and Privacy in Social Networks and Big Data |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Industry/Business |
| Results and Impact | Keynote at a conference/symposium/ workshop. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://nss-socialsec2023.cyber.kent.ac.uk/keynotes.php |
| Description | New Research Group at the Internet Research Task Force |
| Form Of Engagement Activity | A formal working group, expert panel or dialogue |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Professional Practitioners |
| Results and Impact | I created and chair a Research Group at the Internet Research Task Force. The Research Group meets 3 times a year at associated Internet Engineering Task Force Meetings. In the multiple meeting of the research group, there has been a wide discussion and interest in follow up activities, and engagement. |
| Year(s) Of Engagement Activity | 2023,2024 |
| URL | https://datatracker.ietf.org/rg/rasprg/about/ |
| Description | Paper Presentation - Understanding online harms and safety of vulnerable groups going through serious life transitions |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Postgraduate students |
| Results and Impact | Workshop presentation at the 8th Workshop on Inclusive Privacy and Security, part of the SOUPS'23 conference. The workshop was attended by academics at various stages of their career ranging from PhD students to professors. This venue enabled us to educate others on the design decisions required to conduct ethical security/privacy research with people going through life transitions. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Finclusiveprivacy.org%2Fworkshops%2... |
| Description | Poster Presentation - Sensitive Methods and Empathy for Understanding Privacy Needs of Those Living through Serious Life Transitions. |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Postgraduate students |
| Results and Impact | Conference poster presentation at the Behavioural and Social Sciences in Security Conference (BASS'23) where the audience consisted of a variety of disciplines across academia, the third sector, and industry. The venue enabled us to gauge whether the technological and methodological approaches being used in our research were ethically responsible. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://crestresearch.ac.uk/bass23/ |
| Description | Poster Presentation - Using Social Media Posts as Prompts to ChatGPT to Produce Tailored Privacy Advice for People Going Through Life Transitions |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Postgraduate students |
| Results and Impact | Conference poster presentation at the Behavioural and Social Sciences in Security Conference (BASS'23) where the audience consisted of a variety of disciplines across academia, the third sector, and industry. The venue enabled us to gauge whether the technological and methodological approaches being used in our research were ethically responsible. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://crestresearch.ac.uk/bass23/ |
| Description | Redes sociales evolución y alternativas: Twitter, Mastodon, Bluesky |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Media (as a channel to the public) |
| Results and Impact | Science journalists from the Spanish centre for advanced scientific studies attended the event. The event informed them on recent developments on social media networks. |
| Year(s) Of Engagement Activity | 2025 |
| Description | Talk - 2nd CyberMi2 Research Day, 2024 |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Postgraduate students |
| Results and Impact | The CiberMi2' 2024 event was an invitation-only event. The representatives from various universities across UK presented their work on security and privacy (SP) and minority and minoritized users. The event also hosted a group brainstorming discussion on topics such as FemTech and responsible technology. |
| Year(s) Of Engagement Activity | 2024 |
| URL | https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsites.google.com%2Fview%2Fmaryammj... |
| Description | Talk at RIPE 87 |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Professional Practitioners |
| Results and Impact | The RIPE 87 meeting had 556 physical attendants and 455 remote ones. The presentation sparked a debate with practitioners and attendants engaged in policy making. |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://ripe87.ripe.net/archives/video/1247/ |
| Description | Talk at a IAAA ICWSM workshop (Flocking to Mastodon: Tracking the Great Twitter Migration) |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | International |
| Primary Audience | Postgraduate students |
| Results and Impact | The talk discussed how users transitioned from Twitter to Mastodon and how their language evolved and whether conversations were more or less toxic in one platform or the other |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://sites.google.com/view/icwsm2023datachallenge/home |
| Description | Talk by Prof. Wendy Moncur - Navigating bias in online privacy research |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Industry/Business |
| Results and Impact | Talk to DSTL |
| Year(s) Of Engagement Activity | 2023 |
| Description | Talk by Prof. Wendy Moncur - Navigating change and Cyber Security Risks |
| Form Of Engagement Activity | A talk or presentation |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Industry/Business |
| Results and Impact | Talk to Financial Conduct Authority |
| Year(s) Of Engagement Activity | 2023 |
| URL | https://pureportal.strath.ac.uk/en/activities/navigating-change-and-cyber-security-risks |
| Description | ¿Y si nos vamos de Twitter, qué? |
| Form Of Engagement Activity | A formal working group, expert panel or dialogue |
| Part Of Official Scheme? | No |
| Geographic Reach | National |
| Primary Audience | Media (as a channel to the public) |
| Results and Impact | This ewas a debate with scientific communicators and journalists debating the different social media alternatives and who were considering to abandon twitter. |
| Year(s) Of Engagement Activity | 2025 |
| URL | https://aecomunicacioncientifica.org/adios-twitter-x-hola-bluesky/ |
