TY - GEN
T1 - Challenges in inferring privacy properties of smart devices
T2 - 3rd ACM International CoNEXT Student Workshop, CoNEXT-SW 2022, co-located with the 18th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2022
AU - Girish, Aniketh
AU - Prakash, Vijay
AU - Egelman, Serge
AU - Reardon, Joel
AU - Tapiador, Juan
AU - Huang, Danny Yuxing
AU - Matic, Srdjan
AU - Vallina-Rodriguez, Narseo
N1 - Funding Information:
Modern IoT devices are not isolated entities. This makes traditional black-box testing approaches fundamentally inadequate to capture the dynamic, unexpected and privacy-intrusive behaviors of interconnected IoT devices. This paper describes and discusses open research challenges that prevents the research community from developing robust and scalable methods for independent and exhaustive testing of IoT devices. ACKNOWLEDGMENTS This project has been funded by the EU’s H2020 Program (TRUST aWARE Project, Grant Agreement No. 101021377), the Spanish Ministry of Science (ODIO Project, PID2019-111429RB-C22), the Atracción de Talento grant (Ref. 2020-T2/TIC-20184) funded by Madrid regional government, the SCUM Project (RTI2018-102043-B-I00) MCIN/AEI/10.13039/ 501100011033/ERDF and comunidad de Madrid (P2018/TCS-4566). The opinions, findings, and conclusions or recommendations expressed are those of the authors and do not necessarily reflect those of any of the funders.
Funding Information:
This project has been funded by the EU's H2020 Program (TRUST aWARE Project, Grant Agreement No. 101021377), the Spanish Ministry of Science (ODIO Project, PID2019-111429RB-C22), the Atracción de Talento grant (Ref. 2020-T2/TIC-20184) funded by Madrid regional government, the SCUM Project (RTI2018-102043-B-I00) MCIN/AEI/10.13039/ 501100011033/ERDF and comunidad de Madrid (P2018/TCS-4566). The opinions, findings, and conclusions or recommendations expressed are those of the authors and do not necessarily reflect those of any of the funders.
Publisher Copyright:
© 2022 Owner/Author.
PY - 2022/12/9
Y1 - 2022/12/9
N2 - The growth of the number of Internet of Things (IoT) devices in the home has introduced unprecedented challenges for preserving consumers' privacy. To enhance the transparency and trustworthiness of IoT products, industry actors, regulators and standardization bodies have proposed several certifications processes. While previous research developed methodologies to expose a wide range of harmful behaviors in smart home devices, the research community has not yet produced scalable methods to exhaustively detect information leakage in heterogeneous environments so that they can be effectively used for independent certification processes. Research questions such as to what extent is it possible to automatically and independently validate high-level privacy properties and can we evaluate the correctness of privacy controls in a smart home by analyzing the home traffic? remain open. This paper explores and discusses open research challenges in this complex domain and sketches a roadmap to build scalable methods for smart home privacy testing.
AB - The growth of the number of Internet of Things (IoT) devices in the home has introduced unprecedented challenges for preserving consumers' privacy. To enhance the transparency and trustworthiness of IoT products, industry actors, regulators and standardization bodies have proposed several certifications processes. While previous research developed methodologies to expose a wide range of harmful behaviors in smart home devices, the research community has not yet produced scalable methods to exhaustively detect information leakage in heterogeneous environments so that they can be effectively used for independent certification processes. Research questions such as to what extent is it possible to automatically and independently validate high-level privacy properties and can we evaluate the correctness of privacy controls in a smart home by analyzing the home traffic? remain open. This paper explores and discusses open research challenges in this complex domain and sketches a roadmap to build scalable methods for smart home privacy testing.
KW - IoT
KW - measurement techniques
KW - privacy
KW - testing strategies
UR - http://www.scopus.com/inward/record.url?scp=85145875285&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85145875285&partnerID=8YFLogxK
U2 - 10.1145/3565477.3569148
DO - 10.1145/3565477.3569148
M3 - Conference contribution
AN - SCOPUS:85145875285
T3 - CoNEXT-SW 2022 - Proceedings of the International CoNEXT Student Workshop 2022, Part CoNEXT 2022
SP - 26
EP - 28
BT - CoNEXT-SW 2022 - Proceedings of the International CoNEXT Student Workshop 2022, Part CoNEXT 2022
PB - Association for Computing Machinery, Inc
Y2 - 9 December 2022
ER -