SaTC: Frontiers: Collaborative: Security and Privacy in the Lifecycle of IoT for Consumer Environments (SPLICE)

物联网（IoT）现在涉及在日常居住环境（房屋，公寓，酒店，老年生活设施）中部署智能设备，从而形成智能家居。在这个智能事物的时代，日常物品变得充满了计算能力和相互通信以及通过互联网与服务通信的能力，产生了新的安全和隐私风险。SPLICE项目——消费者环境物联网生命周期中的安全和隐私——通过研究智能家居中出现的安全和隐私挑战的人类、社会和技术范围来解决这些风险，这些挑战涉及广泛的住宅利益相关者，包括业主、居住者、租房者、访客和家庭工人。SPLICE还将通过为整个住宅物联网产品和系统生态系统推荐一套最佳实践原则，为可信赖的智能家居管理系统的设计做出贡献。SPLICE研究解决了对这些利益相关者重要的问题，包括：(1)通过发现、识别和定位合作和非合作设备的新方法，为智能家居居民提供态势感知，并发现来自这些设备的信息流；(2)新颖的接口和发现技术，实现了一种新的隐私管理方法，将负担从最终用户转移到有能力评估智能事物隐私状况的消费者代理组织；(3)基于SPLICE对智能家居中利益相关者对隐私的感知和期望的研究，构建了一个整体的隐私推理概念框架。通过在不同类型的多利益相关者住宅环境中探索这些问题，SPLICE将加深对不同环境中隐私和安全的人为因素的科学理解，并开发创新技术，以支持智能物联网整个生命周期的安全和隐私。该项目包括针对中学生的项目，为本科生和研究生提供的研究和体验式学习机会，为博士后学者和初级教师提供的专业发展机会，以及旨在鼓励更多女性和少数族裔从事计算机职业的社区外展。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The Internet of Things (IoT) now involves the deployment of Smart Things in everyday residential environments -- houses, apartments, hotels, senior-living facilities -- resulting in Smart Homes. This era of Smart Things, in which everyday objects become imbued with computational capabilities and the ability to communicate with each other and with services across the Internet, creates novel security and privacy risks. Project SPLICE -- Security and Privacy in the Lifecycle of IoT for Consumer Environments -- addresses these risks by examining the human, social, and technological scope of the security and privacy challenges emerging in Smart Homes across a wide range of residential stakeholders, including owners, occupants, renters, visitors, and domestic workers. SPLICE will also contribute to the design of manageable systems for trustworthy Smart Homes by recommending a set of Best Practice Principles for the entire ecosystem of residential IoT products and systems.SPLICE research addresses issues important to these stakeholders, including: (1) situational awareness for Smart-Home residents through new approaches that discover, identify, and locate both cooperative and non-cooperative devices, and discover information flows from such devices; (2) novel interfaces and discovery techniques that enable a new approach to privacy management, one that shifts the burden from end-users to consumer-proxy organizations that have the capability to evaluate the privacy posture of Smart Things; (3) a holistic conceptual framework for reasoning about privacy, based on SPLICE study of stakeholders' perceptions and expectations of privacy in Smart Homes. By exploring these issues across various types of multi-stakeholder residential settings, SPLICE will deepen scientific understanding of the human factors of privacy and security across different environments and develop innovative technologies to support security and privacy throughout the lifecycle of Smart Things. The project includes programs for middle-school students, research and experiential-learning opportunities for undergraduate and graduate students, professional development for postdoctoral scholars and junior faculty, and community outreach with the aim of encouraging more women and under-represented minorities to pursue careers in computing.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.