SaTC: CORE: Medium: End-to-End Support for Privacy in the Internet -of-things

SaTC：核心：中：物联网隐私的端到端支持

• 批准号: 1801472
• 负责人: Yuvraj Agarwal
• 金额: $ 110万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1801472&HistoricalAwards=false
• 关键词: SaTC; CORE; Medium; End; Support

Interest in the Internet-of-Things (IoT) has increased tremendously over the past few years. Our homes, buildings, and even cities are starting to be instrumented with devices, sensors, and actuators that will provide new capabilities to users, help automate the mundane tasks in their lives, and ultimately to improve quality of life. However, a primary challenge to the long-term success of IoT is privacy. IoT sensors and actuators will be diverse and embedded all around us in the infrastructure, largely in shared spaces with unclear kinds of controls and feedback; further these devices and apps that use them will often be created by developers with little awareness or knowledge of privacy. This project takes a first-principles based approach towards enabling holistic privacy controls to address these concerns, developing an open source IoT stack which will include new privacy mechanisms, privacy models, and systems support for privacy notifications, allowing other researchers and practitioners to build upon them. The research results will serve as an educational resource for students, particularly those from underrepresented groups, and as course projects through new and existing courses taught by the researchers, such as Ubiquitous Personal Smart Agents, User-Focused Sensing Systems and Distributed Systems. The overarching goal of this proposal is to support privacy in Internet of Things deployments from an end-to-end perspective, taking an interdisciplinary approach to address fundamental issues in IoT privacy along four main thrusts: (1) conducting a series of interviews and surveys to understand user concerns about IoT privacy (e.g. type of data, granularity, purpose, and so on); (2) developing a suite of novel privacy mechanisms on top of an IoT software stack to make it easier for developers and end-users to manage privacy, including new forms of access control, a stream-based functional programming approach that makes it easier for developers to get personal data in a privacy-sensitive manner, and developer support for specifying purposes of data access and usage; (3) designing and evaluating new kinds of privacy notifications, as well as ways to inspect and offer some control over what specific sensors are doing; and (4) designing and evaluating new kinds of policies for letting administrators and end-users manage sensitive data, including proximity and temporal degradation of data. These proposed ideas will be implemented, deployed, and evaluated in an extensive IoT living lab testbed that is being deployed at the university. The work will lead to significant interdisciplinary advances at the intersection of cyber-physical systems, human-computer interaction, and usable privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在过去的几年中，人们对文字的兴趣（IoT）的兴趣大大增加。我们的房屋，建筑物甚至城市开始使用设备，传感器和执行器来仪器，这些设备，传感器和执行器将为用户提供新的功能，帮助自动化生活中平凡的任务，并最终改善生活质量。但是，对物联网长期成功的主要挑战是隐私。物联网传感器和执行器将多样化，并嵌入我们周围的基础设施中，主要是在具有不清楚的控制和反馈的共享空间中；此外，这些使用它们的设备和应用程序通常是由几乎没有意识或隐私知识的开发人员创建的。该项目采用基于第一原理的方法来使整体隐私控制能够解决这些问题，开发开源的物联网堆栈，其中包括新的隐私机制，隐私模型和系统支持隐私通知，并允许其他研究人员和从业人员建立在它们的基础上。研究结果将为学生，特别是来自代表性不足的团体的学生提供教育资源，以及通过研究人员教授的新课程和现有课程的课程项目，例如无处不在的个人智能代理，以用户为中心的传感系统和分布式系统。 该提案的总体目标是从端到端的角度支持事物部署的隐私，采用跨学科的方法沿着四个主要推力解决IoT隐私的基本问题：（1）进行一系列访谈和Surveys来了解IoT的用户关注，以了解IOT的顾虑（例如，数据，粒度，Granularity of Granularity of Granularity of Granularity of Granularity，and comples，以及）; （2）在物联网软件堆栈上开发一套新型的隐私机制，以使开发人员和最终用户更容易管理隐私，包括新形式的访问控制，一种基于流的功能编程方法，使开发人员更容易以隐私敏感的方式获取个人数据，并为指定数据访问和用途的指定目的而获得开发人员支持； （3）设计和评估新型的隐私通知，以及检查和提供对特定传感器正在执行的操作的方法的方法； （4）设计和评估用于让管理员和最终用户管理敏感数据的新型政策，包括数据的接近性和时间降级。这些提出的想法将在大学部署的广泛的物联网生活实验室测试中实施，部署和评估。这项工作将导致在网络物理系统，人类计算机互动和可用隐私的交集中取得重大的跨学科进步。该奖项反映了NSF的法定任务，并被认为值得通过基金会的知识分子优点和更广泛的影响审查标准通过评估来进行评估。

项目成果

Understanding iOS Privacy Nutrition Labels: An Exploratory Large-Scale Analysis of App Store Data

了解 iOS 隐私营养标签：对 App Store 数据进行探索性大规模分析

• DOI: 10.1145/3491101.3519739
• 发表时间: 2022
• 期刊: SIGCHI Conference: Human Factors in Computing Systems
• 作者: Li, Yucheng;Chen, Deyuan;Li, Tianshi;Agarwal, Yuvraj;Cranor, Lorrie Faith;Hong, Jason I.
• 通讯作者: Hong, Jason I.

A First Look at Third-Party Service Dependencies of Web Services in Africa

非洲 Web 服务的第三方服务依赖性初探

• 发表时间: 2023
• 期刊: International Conference on Passive and Active Network Measurement
• 作者: Kashaf, Aqsa;Dou, Jiachen;Belova, Margarita;Apostolaki, Maria;Agarwal, Yuvraj;Sekar, Vyas
• 通讯作者: Sekar, Vyas

Exploring the Needs of Users for Supporting Privacy-Protective Behaviors in Smart Homes

探索用户支持智能家居隐私保护行为的需求

• DOI: 10.1145/3491102.3517602
• 发表时间: 2022
• 期刊: SIGCHI Conference: Human Factors in Computing Systems
• 作者: Jin, Haojian;Guo, Boyuan;Roychoudhury, Rituparna;Yao, Yaxing;Kumar, Swarun;Agarwal, Yuvraj;Hong, Jason I.
• 通讯作者: Hong, Jason I.

Capture: Centralized Library Management for Heterogeneous IoT Devices

• 发表时间: 2021
• 作者: Han Zhang;Abhijith Anilkumar;Matt Fredrikson;Yuvraj Agarwal

Peekaboo: A Hub-Based Approach to Enable Transparency in Data Processing within Smart Homes

Peekaboo：一种基于集线器的方法，可实现智能家居内数据处理的透明度

• DOI: 10.1109/sp46214.2022.9833629
• 发表时间: 2022
• 期刊: 2022 IEEE Symposium on Security and Privacy (SP
• 作者: Jin, Haojian;Liu, Gram;Hwang, David;Kumar, Swarun;Agarwal, Yuvraj;Hong, Jason I.
• 通讯作者: Hong, Jason I.