SaTC: Frontiers: Collaborative: Security and Privacy in the Lifecycle of IoT for Consumer Environments (SPLICE)

物联网(IoT)现在涉及到在日常居住环境-房屋、公寓、酒店、老年生活设施-部署智能物，从而产生智能家居。在这个智能物的时代，日常事物变得具有计算能力，并具有通过互联网相互通信和使用服务的能力，这带来了新的安全和隐私风险。项目拼接-消费者环境物联网生命周期中的安全和隐私-通过检查智能家居中出现的安全和隐私挑战的人、社会和技术范围来解决这些风险，涉及范围广泛的住宅利益相关者，包括业主、居住者、租户、访客和家政工作者。Splice还将通过为整个住宅物联网产品和系统生态系统推荐一组最佳实践原则，为可信任的智能家居设计可管理的系统。SPLICE研究解决了对这些利益相关者重要的问题，包括：(1)通过发现、识别和定位合作和非合作设备并发现来自此类设备的信息流的新方法，为智能家居居民提供情境感知；(2)新的接口和发现技术，实现了一种新的隐私管理方法，将负担从最终用户转移到有能力评估智能物的隐私状况的消费者代理组织；(3)基于对智能家居中利益相关者对隐私的感知和期望的Splice研究，提出了一个关于隐私的整体概念框架。通过探索不同类型的多方利益相关者住宅环境中的这些问题，Splice将深化对不同环境中隐私和安全的人为因素的科学理解，并开发创新技术，在Smart Things的整个生命周期中支持安全和隐私。该项目包括面向中学生的项目，为本科生和研究生提供的研究和体验学习机会，为博士后学者和初级教师提供的专业发展，以及旨在鼓励更多女性和未被充分代表的少数群体从事计算机职业的社区推广。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The Internet of Things (IoT) now involves the deployment of Smart Things in everyday residential environments -- houses, apartments, hotels, senior-living facilities -- resulting in Smart Homes. This era of Smart Things, in which everyday objects become imbued with computational capabilities and the ability to communicate with each other and with services across the Internet, creates novel security and privacy risks. Project SPLICE -- Security and Privacy in the Lifecycle of IoT for Consumer Environments -- addresses these risks by examining the human, social, and technological scope of the security and privacy challenges emerging in Smart Homes across a wide range of residential stakeholders, including owners, occupants, renters, visitors, and domestic workers. SPLICE will also contribute to the design of manageable systems for trustworthy Smart Homes by recommending a set of Best Practice Principles for the entire ecosystem of residential IoT products and systems.SPLICE research addresses issues important to these stakeholders, including: (1) situational awareness for Smart-Home residents through new approaches that discover, identify, and locate both cooperative and non-cooperative devices, and discover information flows from such devices; (2) novel interfaces and discovery techniques that enable a new approach to privacy management, one that shifts the burden from end-users to consumer-proxy organizations that have the capability to evaluate the privacy posture of Smart Things; (3) a holistic conceptual framework for reasoning about privacy, based on SPLICE study of stakeholders' perceptions and expectations of privacy in Smart Homes. By exploring these issues across various types of multi-stakeholder residential settings, SPLICE will deepen scientific understanding of the human factors of privacy and security across different environments and develop innovative technologies to support security and privacy throughout the lifecycle of Smart Things. The project includes programs for middle-school students, research and experiential-learning opportunities for undergraduate and graduate students, professional development for postdoctoral scholars and junior faculty, and community outreach with the aim of encouraging more women and under-represented minorities to pursue careers in computing.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.