  {"id":726,"date":"2024-11-20T11:38:35","date_gmt":"2024-11-20T16:38:35","guid":{"rendered":"https:\/\/carleton.ca\/ngn\/?p=726"},"modified":"2026-07-13T15:34:07","modified_gmt":"2026-07-13T19:34:07","slug":"privacy-engineering-in-smart-home-sh-systems-a-comprehensive-privacy-threat-analysis-and-risk-management-approach","status":"publish","type":"post","link":"https:\/\/carleton.ca\/ngn\/2024\/privacy-engineering-in-smart-home-sh-systems-a-comprehensive-privacy-threat-analysis-and-risk-management-approach\/","title":{"rendered":"Privacy in IoT Systems"},"content":{"rendered":"\n<section class=\"w-screen px-6 cu-section cu-section--white ml-offset-center md:px-8 lg:px-14\">\n    <div class=\"space-y-6 cu-max-w-child-5xl  md:space-y-10 cu-prose-first-last\">\n\n            <div class=\"cu-textmedia flex flex-col lg:flex-row mx-auto gap-6 md:gap-10 my-6 md:my-12 first:mt-0 max-w-5xl\">\n        <div class=\"justify-start cu-textmedia-content cu-prose-first-last\" style=\"flex: 0 0 100%;\">\n            <header class=\"font-light prose-xl cu-pageheader md:prose-2xl cu-component-updated cu-prose-first-last\">\n                                    <h1 class=\"cu-prose-first-last font-semibold !mt-2 mb-4 md:mb-6 relative after:absolute after:h-px after:bottom-0 after:bg-cu-red after:left-px text-3xl md:text-4xl lg:text-5xl lg:leading-[3.5rem] pb-5 after:w-10 text-cu-black-700 not-prose\">\n                        Privacy in IoT Systems\n                    <\/h1>\n                \n                                \n                            <\/header>\n\n                    <\/div>\n\n            <\/div>\n\n    <\/div>\n<\/section>\n\n<h2 id=\"privacy-engineering-in-smart-home-sh-systems-a-comprehensive-privacy-threat-analysis-and-risk-management-approach\" class=\"wp-block-heading\">Privacy Engineering in Smart Home (SH) Systems: A Comprehensive Privacy Threat Analysis and Risk Management Approach<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"auto\">Addressing privacy concerns in Smart Home (SH) systems is essential, however, more research is needed in analyzing and evaluation of privacy threats for effective risk management. Although there has been some research on privacy in SH, most existing research primarily focuses on user privacy, while often neglecting the importance privacy of device data especially device identity privacy. This oversight can significantly impact overall user privacy within the SH system. This study incorporates privacy engineering (PE) principles into SH systems, considering user and device data privacy. We have developed a comprehensive reference model for a typical SH system, shown in Figure 1.&nbsp;<\/span><span data-ccp-props=\"{&quot;335551550&quot;:6,&quot;335551620&quot;:6}\">&nbsp;<\/span><\/p>\n\n\n\n\n\n<figure class=\"wp-block-image aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"598\" src=\"https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2.jpg\" alt=\"\" class=\"wp-image-729\" srcset=\"https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2.jpg 800w, https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2-160x120.jpg 160w, https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2-240x179.jpg 240w, https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2-768x574.jpg 768w, https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2-400x299.jpg 400w, https:\/\/carleton.ca\/ngn\/wp-content\/uploads\/sites\/276\/Reference-Model2-360x269.jpg 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"auto\">Using the initial stage (Model the system) of the <\/span><a href=\"https:\/\/linddun.org\/instructions-for-pro\/\"><span data-contrast=\"none\">LINDDUN PRO PE<\/span><\/a><span data-contrast=\"auto\"> framework for privacy engineering, we present a data flow diagram (DFD) based on this reference model to enhance our understanding of how SH systems operate.<\/span><span data-ccp-props=\"{&quot;335551550&quot;:6,&quot;335551620&quot;:6}\">&nbsp;<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"auto\">We utilize the LINDDUN PRO threat model to identify potential privacy threats and conduct a privacy threat analysis (PTA) which the second stage (Elicit threat). After this, we conduct a privacy impact assessment (PIA) to manage privacy risks by prioritizing threats based on their likelihood of occurrence and potential impact. Finally, we recommend various privacy-enhancing techniques (PETs) that can help mitigate these threats which concluded the last stage (manage threats) of the LINDDUN PE PRO framework.<\/span><span data-ccp-props=\"{&quot;335551550&quot;:6,&quot;335551620&quot;:6}\">&nbsp;<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"auto\">This approach expresses the correlation between Privacy engineering (PE), privacy threat analysis (PTA), and privacy impact assessment (PIA).<\/span><span data-ccp-props=\"{&quot;335551550&quot;:6,&quot;335551620&quot;:6}\">&nbsp;<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Alalade, E. D., Mahyoub, M., &amp; Matrawy, A. (2024). <\/span><a href=\"https:\/\/arxiv.org\/pdf\/2401.09519\"><span data-contrast=\"none\">Privacy Engineering in Smart Home (SH) Systems: A Comprehensive Privacy Threat Analysis and Risk Management Approach<\/span><\/a><span data-contrast=\"none\">.\u202f<\/span><i><span data-contrast=\"none\">arXiv preprint arXiv:2401.09519<\/span><\/i><span data-contrast=\"none\">.<\/span><span data-ccp-props=\"{&quot;335551550&quot;:6,&quot;335551620&quot;:6}\">&nbsp;<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Engineering in Smart Home (SH) Systems: A Comprehensive Privacy Threat Analysis and Risk Management Approach Addressing privacy concerns in Smart Home (SH) systems is essential, however, more research is needed in analyzing and evaluation of privacy threats for effective risk management. Although there has been some research on privacy in SH, most existing research [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":729,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[23],"tags":[],"class_list":["post-726","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-projects"],"acf":{"cu_post_thumbnail":""},"_links":{"self":[{"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/posts\/726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/comments?post=726"}],"version-history":[{"count":3,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/posts\/726\/revisions"}],"predecessor-version":[{"id":753,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/posts\/726\/revisions\/753"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/media\/729"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/media?parent=726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/categories?post=726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/carleton.ca\/ngn\/wp-json\/wp\/v2\/tags?post=726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}