PARROT Interactive Privacy-Aware Internet of Things Application Design Tool
PARROT Interactive Privacy-Aware Internet of Things Application Design Tool
复制标题
PARROT 互动隐私感知物联网应用设计工具
DOI：
10.1145/3580880
复制
发表时间：
2023
影响因子：
--
通讯作者：
Alhirabi N
中科院分区：
文献类型：
--
作者：
Alhirabi N
物联网（IoT）应用程序通常会收集和分析被归类为敏感或特殊类别的个人数据的个人数据。根据数据隐私法，这些数据受到更高程度的保护。无论支持隐私实践的法律的要求如何（例如设计隐私（PBD）计划），软件开发人员尚未普遍遵循这些实践。开发隐私保护应用程序的难度强调了探索开发人员嵌入隐私技术所面临的问题的重要性，这表明需要一个支持工具。提出了一种交互式物联网应用设计工具PARROT（PrivAcy by design tool foR interRnet Of Things）。该工具可帮助开发人员设计具有隐私意识的物联网应用程序，在设计过程中考虑隐私合规性，并提供有关潜在隐私侵犯的实时反馈。对18名开发人员进行了用户研究，包括半结构化访谈和设计练习，以了解开发人员通常如何在设计过程中处理隐私。与隐私律师的合作被用来审查开发人员的设计，以发现可以通过开发软件工具来解决的隐私限制。基于这些发现，在两项对照实验室研究中实施并评估了PARROT的概念验证原型。研究结果表明，使用PARROT设计的物联网应用程序更好地解决了隐私问题，并设法减少了所发现的几个限制。从隐私合规的角度来看，PARROT帮助开发人员在整个设计和测试过程中满足合规性要求。这是通过从一开始就将隐私特定的设计功能纳入物联网应用程序而不是追溯来实现的。(Demo视频）。
Internet of Things (IoT) applications typically collect and analyse personal data that is categorised as sensitive or special category of personal data. These data are subject to a higher degree of protection under data privacy laws. Regardless of legal requirements to support privacy practices, such as in Privacy by Design (PbD) schemes, these practices are not yet commonly followed by software developers. The difficulty of developing privacy-preserving applications emphasises the importance of exploring the problems developers face to embed privacy techniques, suggesting the need for a supporting tool. An interactive IoT application design tool - PARROT (PrivAcy by design tool foR inteRnet Of Things) - is presented. This tool helps developers to design privacy-aware IoT applications, taking account of privacy compliance during the design process and providing real-time feedback on potential privacy violations. A user study with 18 developers was conducted, comprising a semi-structured interview and a design exercise to understand how developers typically handle privacy within the design process. Collaboration with a privacy lawyer was used to review designs produced by developers to uncover privacy limitations that could be addressed by developing a software tool. Based on the findings, a proof-of-concept prototype of PARROT was implemented and evaluated in two controlled lab studies. The outcome of the study indicates that IoT applications designed with PARROT addressed privacy concerns better and managed to reduce several of the limitations identified. From a privacy compliance perspective, PARROT helps developers to address compliance requirements throughout the design and testing process. This is achieved by incorporating privacy specific design features into the IoT application from the beginning rather than retrospectively. (Demo Video).