“Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

“Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices

Mahdi Nasrullah Al-Ameen
  • Fonction : Auteur
  • PersonId : 1133712
Apoorva Chauhan
  • Fonction : Auteur
  • PersonId : 1133713
M. Ahsan
  • Fonction : Auteur
  • PersonId : 1133714
Huzeyfe Kocabas
  • Fonction : Auteur
  • PersonId : 1133715

Résumé

With the rapid deployment of Internet of Things (IoT) technologies, it has been essential to address the security and privacy issues through maintaining transparency in data practices, and designing new tools for data protection. To address these challenges, the prior research focused on identifying user’s privacy preferences in different contexts of IoT usage, user’s mental model of security threats, and their privacy practices for a specific type of IoT device (e.g., smart speaker). However, there is a dearth in existing literature to understand the mismatch between user’s perceptions and the actual data practices of IoT devices. Such mismatches could lead users unknowingly sharing their private information, exposing themselves to unanticipated privacy risks. To address these issues, we conducted a lab study with 42 participants, where we compared the data practices stated in the privacy policy of 28 IoT devices with the participants’ perceptions of data collection, sharing, and protection. Our findings provide insights into the mismatched privacy perceptions of users, which lead to our recommendations on designing simplified privacy notice by highlighting the unexpected data practices.
Fichier principal
Vignette du fichier
497442_1_En_25_Chapter.pdf (508.15 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03657704 , version 1 (03-05-2022)

Licence

Paternité

Identifiants

Citer

Mahdi Nasrullah Al-Ameen, Apoorva Chauhan, M. Ahsan, Huzeyfe Kocabas. “Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices. 14th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2020, Mytilene, Lesbos, Greece. pp.329-340, ⟨10.1007/978-3-030-57404-8_25⟩. ⟨hal-03657704⟩
28 Consultations
45 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More