Privacy and Security Nutrition Labels to Inform IoT Consumers

Monday, February 01, 2021 - 1:45 pm–2:15 pm

Pardis Emami-Naeini, University of Washington

Abstract: 

IoT consumers are concerned about the privacy and security of their smart devices, but they cannot do much about it at the time of purchase. This is due to the unavailability of such information when making a purchase decision, at least in the US and most countries. In the past few years, Finland, UK, and Singapore have started designing a label for IoT devices to inform consumers about the privacy and security practices of smart devices at the point of sale. We believe US consumers have the same right to know how their devices handle their information. Therefore, we decided to bring this much-needed transparency to consumers at the time of purchase. By conducting a series of studies and incorporating inputs from thousands of consumers and experts, we developed an informative and usable privacy and security label for IoT devices. In addition, to help manufacturers easily create these labels for their products, we developed a tool to generate the human and machine readable formats of the labels.

Pardis Emami-Naeini, University of Washington

Pardis Emami-Naeini is currently a postdoctoral scholar at University of Washington. She received a B.Sc. degree in computer engineering from Sharif University of Technology, and M.Sc. and Ph.D. degrees in computer science from Carnegie Mellon University (CMU) under Prof. Lorrie Cranor and Prof. Yuvraj Agarwal. As part of her doctoral research, she developed a usable privacy and security label for smart devices to inform consumers’ Internet of Things-related purchase decisions. Pardis was selected as a Rising Star in electrical engineering and computer science in October 2019, and she was awarded the 2019-2020 CMU CyLab presidential fellowship.

BibTeX
@conference {264112,
author = {Pardis Emami-Naeini},
title = {Privacy and Security Nutrition Labels to Inform IoT Consumers},
year = {2021},
address = {Oakland, CA},
publisher = {{USENIX} Association},
month = feb,
}