PARROT-Reference-Cited by-同舟云学术

PARROT

Published:2022-03-27 Issue:1 Volume:7 Page:1-37
ISSN:2474-9567
Container-title:Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies
language:en
Short-container-title:Proc. ACM Interact. Mob. Wearable Ubiquitous Technol.

Author:

Alhirabi Nada¹^ORCID,Beaumont Stephanie²^ORCID,Llanos Jose Tomas³^ORCID,Meedeniya Dulani⁴^ORCID,Rana Omer⁵^ORCID,Perera Charith⁵^ORCID

Affiliation:

1. Cardiff University, School of Computer Science and Informatics, Cardiff, UK, King Saud University, Riyadh, Saudi Arabia

2. My Data Fix Ltd, London, UK

3. University College London, London, UK

4. University of Moratuwa, Moratuwa, Sri Lanka

5. Cardiff University, Cardiff, UK

Abstract

Internet of Things (IoT) applications typically collect and analyse personal data that is categorised as sensitive or special category of personal data. These data are subject to a higher degree of protection under data privacy laws. Regardless of legal requirements to support privacy practices, such as in Privacy by Design (PbD) schemes, these practices are not yet commonly followed by software developers. The difficulty of developing privacy-preserving applications emphasises the importance of exploring the problems developers face to embed privacy techniques, suggesting the need for a supporting tool. An interactive IoT application design tool - PARROT (PrivAcy by design tool foR inteRnet Of Things) - is presented. This tool helps developers to design privacy-aware IoT applications, taking account of privacy compliance during the design process and providing real-time feedback on potential privacy violations. A user study with 18 developers was conducted, comprising a semi-structured interview and a design exercise to understand how developers typically handle privacy within the design process. Collaboration with a privacy lawyer was used to review designs produced by developers to uncover privacy limitations that could be addressed by developing a software tool. Based on the findings, a proof-of-concept prototype of PARROT was implemented and evaluated in two controlled lab studies. The outcome of the study indicates that IoT applications designed with PARROT addressed privacy concerns better and managed to reduce several of the limitations identified. From a privacy compliance perspective, PARROT helps developers to address compliance requirements throughout the design and testing process. This is achieved by incorporating privacy specific design features into the IoT application from the beginning rather than retrospectively. (Demo Video).

Funder

EPSRC

PACE

King Saud University

Publisher

Association for Computing Machinery (ACM)

Subject

Computer Networks and Communications,Hardware and Architecture,Human-Computer Interaction

Link

https://dl.acm.org/doi/pdf/10.1145/3580880

Reference97 articles.

1. Yasemin Acar Sascha Fahl and Michelle L Mazurek. 2016. You are Not Your Developer Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. In 2016 IEEE Cybersecurity Development (SecDev). 3--8. https://doi.org/10.1109/SecDev.2016.013 10.1109/SecDev.2016.013

2. Yasemin Acar Sascha Fahl and Michelle L Mazurek. 2016. You are Not Your Developer Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. In 2016 IEEE Cybersecurity Development (SecDev). 3--8. https://doi.org/10.1109/SecDev.2016.013

3. Visual Simple Transformations: Empowering End-Users to Wire Internet of Things Objects;Akiki Pierre A;ACM Trans. Comput.-Hum. Interact,2017

4. Security and Privacy Requirements for the Internet of Things

5. Majedah Alrehiely , Parisa Eslambolchilar , and Rita Borgo . 2018. Evaluating Different Visualization Designs for Personal Health Data. April ( 2018 ). https://doi.org/10.14236/ewic/hci2018.205 10.14236/ewic Majedah Alrehiely, Parisa Eslambolchilar, and Rita Borgo. 2018. Evaluating Different Visualization Designs for Personal Health Data. April (2018). https://doi.org/10.14236/ewic/hci2018.205