“Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices - Human Aspects of Information Security and Assurance Access content directly
Conference Papers Year : 2020

“Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices

Mahdi Nasrullah Al-Ameen
  • Function : Author
  • PersonId : 1133712
Apoorva Chauhan
  • Function : Author
  • PersonId : 1133713
M. Ahsan
  • Function : Author
  • PersonId : 1133714
Huzeyfe Kocabas
  • Function : Author
  • PersonId : 1133715

Abstract

With the rapid deployment of Internet of Things (IoT) technologies, it has been essential to address the security and privacy issues through maintaining transparency in data practices, and designing new tools for data protection. To address these challenges, the prior research focused on identifying user’s privacy preferences in different contexts of IoT usage, user’s mental model of security threats, and their privacy practices for a specific type of IoT device (e.g., smart speaker). However, there is a dearth in existing literature to understand the mismatch between user’s perceptions and the actual data practices of IoT devices. Such mismatches could lead users unknowingly sharing their private information, exposing themselves to unanticipated privacy risks. To address these issues, we conducted a lab study with 42 participants, where we compared the data practices stated in the privacy policy of 28 IoT devices with the participants’ perceptions of data collection, sharing, and protection. Our findings provide insights into the mismatched privacy perceptions of users, which lead to our recommendations on designing simplified privacy notice by highlighting the unexpected data practices.
Fichier principal
Vignette du fichier
497442_1_En_25_Chapter.pdf (508.15 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03657704 , version 1 (03-05-2022)

Licence

Attribution

Identifiers

Cite

Mahdi Nasrullah Al-Ameen, Apoorva Chauhan, M. Ahsan, Huzeyfe Kocabas. “Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices. 14th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2020, Mytilene, Lesbos, Greece. pp.329-340, ⟨10.1007/978-3-030-57404-8_25⟩. ⟨hal-03657704⟩
22 View
26 Download

Altmetric

Share

Gmail Facebook X LinkedIn More