Users face various privacy risks in smart homes, yet there are limited ways for them to learn about the details of such risks, such as the data practices of smart home devices and their data flow. In this paper, we present Privacy Plumber, a system that enables a user to inspect and explore the privacy "leaks" in their home using an augmented reality tool. Privacy Plumber allows the user to learn and understand the volume of data leaving the home and how that data may affect a user's privacy -- in the same physical context as the devices in question, because we visualize the privacy leaks with augmented reality. Privacy Plumber uses ARP spoofing to gather aggregate network traffic information and presents it through an overlay on top of the device in an smartphone app. The increased transparency aims to help the user make privacy decisions and mend potential privacy leaks, such as instruct Privacy Plumber on what devices to block, on what schedule (i.e., turn off Alexa when sleeping), etc. Our initial user study with six participants demonstrates participants' increased awareness of privacy leaks in smart devices, which further contributes to their privacy decisions (e.g., which devices to block).
翻译:用户面临智能家居中的多种隐私风险,但了解此类风险细节的途径有限,例如智能设备的数据实践及其数据流。本文介绍了Privacy Plumber系统,该系统通过增强现实工具使用户能够检查并探索家中的隐私"泄露"。Privacy Plumber允许用户了解离开家庭的数据量及其可能对隐私的影响——在设备所处的同一物理环境中,通过增强现实可视化隐私泄露。该系统运用ARP欺骗收集聚合网络流量信息,并通过智能手机应用以覆盖层形式呈现于设备之上。增强的透明度旨在帮助用户做出隐私决策并修复潜在隐私泄露,例如指示Privacy Plumber在特定时段(如睡觉时关闭Alexa)阻止哪些设备。我们针对六名参与者的初步用户研究表明,该方法显著提升了参与者对智能设备隐私泄露的认知度,进而影响其隐私决策(例如选择阻止哪些设备)。