TWC: Large: Collaborative: Living in the Internet of Things

越来越多的日常生活中使用的物品都有互联网连接，创造了一个IoT(物联网)。计算机安全和隐私对于物联网生态系统来说至关重要，因为安全漏洞可能会对人、他们的家和他们的社区造成真实而重大的伤害。这些安全问题也非常具有挑战性，不仅是因为物联网设备本身的特性，还因为用户是多样化的，他们的技术知识和获得技术支持的机会各不相同，包括儿童和使用家庭护理技术的弱势群体。此外，当用户以意想不到的方式结合技术时，还会出现额外的风险。应对物联网安全和隐私的挑战需要进行大规模的跨学科努力。物联网安全和隐私的有效方法是整体，集成了人机交互、网络安全、密码学和普适计算。实施加密要求不仅需要构建能够在低容量物联网设备上运行的系统，还需要使用包含人类需求的威胁模型。转换安全和隐私要求和首选项需要了解人们想要什么，以人们可以理解的方式展示技术，并知道什么是技术上的现实。这需要进行行为和组织研究，并与公共和私营部门的利益相关者进行讨论。该项目正在为物联网安全和隐私奠定基础，该基础对人类体验是直观、自然的，提供必要的技术保证，并促进更大的物联网用户和制造商社区的采用。

More and more objects used in daily life have Internet connectivity, creating an "Internet of Things" (IoT). Computer security and privacy for an IoT ecosystem are fundamentally important because security breaches can cause real and significant harm to people, their homes, and their community. These security issues also are very challenging not only because of the properties of IoT devices themselves but also because the users are diverse, vary in their technical knowledge and access to technical support, and include vulnerable populations such as children and those using in-home care technologies. Moreover, additional risks emerge when users combine technologies in unexpected ways. Meeting the challenges of IoT security and privacy requires a large, interdisciplinary effort. An effective approach to IoT security and privacy is holistic, integrating human-computer interaction, network security, cryptography, and pervasive computing. Enforcing cryptographic requirements requires not only building systems that can function on low-capacity IoT devices, but also using threat models that incorporate human requirements. Translating security and privacy requirements and preferences requires understanding what people want, presenting the technologies in a manner people can understand, and knowing what is technologically realistic. This requires behavioral and organizational research, with discussions involving public and private sector stakeholders. The project is developing a foundation for IoT security and privacy that is intuitive, natural to the human experience, provides the necessary technical guarantees, and facilitates adoption by the larger IoT community of users and manufacturers.