TY - GEN
T1 - IFTTT Privacy Checker
AU - Paci, Federica
AU - Bianchin, Davide
AU - Quintarelli, Elisa
AU - Zannone, Nicola
PY - 2020
Y1 - 2020
N2 - IFTTT is a platform that allows users to create applets for connecting smart devices to online services, or to compose online services, in order to provide customized functionalities in Internet of Things scenarios. Despite their flexibility and ease-of-use, IFTTT applets may create privacy risks for users, who might unknowingly share sensitive information with a wider audience than intended. In this paper, we focus on privacy issues related to the sharing of pictures through IFTTT applets. We propose a framework to detect when IFTTT applets violate user’s privacy, both at design-time and run-time, based on the visibility and sensitivity of shared data. We have realized two prototypes implementing the framework, a browser plugin to detect design-time privacy violations and an online service to detect run-time privacy violations. We evaluate the online service using an IFTTT applet for posting to Twitter new pictures uploaded in Google Drive.
AB - IFTTT is a platform that allows users to create applets for connecting smart devices to online services, or to compose online services, in order to provide customized functionalities in Internet of Things scenarios. Despite their flexibility and ease-of-use, IFTTT applets may create privacy risks for users, who might unknowingly share sensitive information with a wider audience than intended. In this paper, we focus on privacy issues related to the sharing of pictures through IFTTT applets. We propose a framework to detect when IFTTT applets violate user’s privacy, both at design-time and run-time, based on the visibility and sensitivity of shared data. We have realized two prototypes implementing the framework, a browser plugin to detect design-time privacy violations and an online service to detect run-time privacy violations. We evaluate the online service using an IFTTT applet for posting to Twitter new pictures uploaded in Google Drive.
UR - http://www.scopus.com/inward/record.url?scp=85097851432&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-64455-0_6
DO - 10.1007/978-3-030-64455-0_6
M3 - Conference contribution
AN - SCOPUS:85097851432
SN - 9783030644543
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 90
EP - 107
BT - Emerging Technologies for Authorization and Authentication - Third International Workshop, ETAA 2020, Proceedings
A2 - Saracino, Andrea
A2 - Mori, Paolo
PB - Springer
T2 - 3rd International Workshop on Emerging Technologies for Authorization and Authentication, ETAA 2020
Y2 - 14 September 2020 through 18 September 2020
ER -