Information Sciences Seminar——Identifying Privacy Weaknesses from IoT Trigger-action Platforms
报告人：Guangdong Bai (The University of Queensland)
时间：2021-09-23 10:00-11:00
地点：Zoom Meeting ID: 81850272821
Abstract:
Trigger-action platforms such as IFTTT (If This Then That) integrate Internet of Things (IoT) systems. They involve multiple parties whose data control policies radically differ, and thus privacy violations may arise. In this presentation, I will introduce our recent work on the privacy issues in multi-party trigger-action platforms. We use a dynamic testing approach to identify privacy weaknesses, and the key insight is that the applets which program the trigger-action rules can be used as test cases to explore the behavior of the platforms. Using the automatically generated applets, our approaches detect a large number of potential privacy violations from real-world trigger-action platforms.
Bio:
Dr. Guangdong Bai is a Senior Lecturer in the University of Queensland, Australia. He obtained his PhD degree from National University of Singapore, and master and bachelor degrees from Peking University. His research interest includes security, software engineering and formal methods.
