Computers are now integrating into everyday objects, from medical devices to children’s toys. Most consumers are unaware that these devices are constantly collecting, storing, or disclosing their personal information. Bringing these connected devices into the home particularly raises important issues of privacy and security.
This case study positions students to consider the features of a "Smart Home" and to explore a worst-case scenario, namely, that a smart home might be used in a gaslighting attack. Learners first consider how technologies in domestic settings can have ripple effects throughout society and then design policy and technical responses. Please Note: This case study contains potentially distressing content related to domestic abuse.
View PDF »
In this paper, presented at the 2018 IEEE Cybersecurity Development Conference (SecDev 2018), a team with Lab researchers presents Tyche, a secure development methodology to limit the risk that apps pose to smart home users.
Research PaperThis paper, presented at the Network and Distributed System Security Symposium (NDSS) 2018, introduces Decentralized Action Integrity, a security principle that prevents an untrusted trigger-action platform from misusing compromised OAuth tokens in ways that are inconsistent with any given user’s set of trigger-action rules.
Research PaperComputing is transitioning from single-user devices to the Internet of Things, in which multiple users with complex social relationships interact with a single device. In this paper from the 12th USENIX Workshop on Offensive Technologies (WOOT 2018), a team with Lab researchers begin re-envisioning access control and authentication for such settings in the home IoT.
Research PaperThis paper identifies privacy and security issues arising from possible misuse or inappropriate use of brain-computer interfaces. It won the Best Paper award at the 2014 International Symposium on Ethics in Engineering, Science and Technology.
Research PaperTech Policy Lab Faculty Co-Director Kohno's talk explored case studies in the design and analysis of computer systems for several types of everyday objects, including wireless medical devices, children's toys, and automobiles.
The Lab co-sponsored the FTC Start with Security Conference, an initiative to provide companies with practical tips and strategies for implementing effective data security.
Event