PFirewall: Semantics-Aware Customizable Data Flow Control for Smart Home Privacy Protection
PFirewall: Semantics-Aware Customizable Data Flow Control for Smart Home Privacy Protection
复制标题
DOI：
10.14722/ndss.2021.24464
复制
发表时间：
2021-01
期刊：
影响因子：
--
通讯作者：
Haotian Chi;Qiang Zeng;Xiaojiang Du;Lannan Luo
中科院分区：
文献类型：
--
作者：
Haotian Chi;Qiang Zeng;Xiaojiang Du;Lannan Luo
物联网（IoT）平台使用户可以部署家庭自动化应用程序。同时，随着大量敏感的设备数据流向IoT平台，隐私问题出现。流向平台的大多数数据实际上并没有触发自动化操作，而一旦设备绑定到平台，房主目前就没有控制权。我们提出PFIREWALL，这是一种可自定义的数据流控制系统，可增强物联网平台用户的隐私。 Pfirewall会自动生成数据最小化策略，该策略仅披露最小数据以实现自动化。此外，PfireWall为房主提供了通过定义用户指定的策略来自定义个人隐私偏好的接口。为了执行这些策略，Pfirewall透明地干预并调节物联网设备和平台之间的通信，而无需修改平台，IoT设备或集线器。四个现实世界测试床上的评估结果表明，PfireWall将发送到平台的物联网数据减少了97％，而不会损害家庭自动化，并有效地减轻了用户活动推论/跟踪攻击和其他隐私风险。
Internet of Things (IoT) platforms enable users to deploy home automation applications. Meanwhile, privacy issues arise as large amounts of sensitive device data flow out to IoT platforms. Most of the data flowing out to a platform actually do not trigger automation actions, while homeowners currently have no control once devices are bound to the platform. We present PFirewall, a customizable data-flow control system to enhance the privacy of IoT platform users. PFirewall automatically generates data-minimization policies, which only disclose minimum amount of data to fulfill automation. In addition, PFirewall provides interfaces for homeowners to customize individual privacy preferences by defining user-specified policies. To enforce these policies, PFirewall transparently intervenes and mediates the communication between IoT devices and the platform, without modifying the platform, IoT devices, or hub. Evaluation results on four real-world testbeds show that PFirewall reduces IoT data sent to the platform by 97% without impairing home automation, and effectively mitigates user-activity inference/tracking attacks and other privacy risks.