Devices that tell on you: Privacy trends in consumer ubiquitous computing

16th USENIX Security Symposium

Volumn , Issue , 2007, Pages 55-70

  Scott Saponas, T ^a   Lester, Jonathan ^a   Hartung, Carl ^a   Agarwal, Sameer ^a   Kohno, Tadayoshi ^a  

^a UNIVERSITY OF WASHINGTON   (United States)

Author keywords

Encryption; Information leakage; Location privacy; Mobile social applications; Multimedia security; Privacy; UbiComp; Variable bitrate (VBR) encoding

Indexed keywords

DATA PRIVACY; ENCODING (SYMBOLS); SIGNAL ENCODING; SOCIAL ASPECTS; UBIQUITOUS COMPUTING;

INFORMATION LEAKAGE; LOCATION PRIVACY; MULTIMEDIA SECURITY; SOCIAL APPLICATIONS; UBICOMP; VARIABLE BIT RATE;

CRYPTOGRAPHY;

EID: 78650117270     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (46)

1. Apple ‘It’s Showtime!’ event – live coverage. http://www.macworld.com/news/2006/09/12/showtime/index.php.
2. D. Balfanz, G. Durfee, R. Grinter, D. Smetters, and P. Stewart. Network-in-a-Box: How to set up a secure wireless network in under a minute. In 13th USENIX Security Symposium, 2004.
3. M. Bellare, A. Boldyreva, A. Desai, and D. Pointcheval. Key-privacy in public-key encryption. In C. Boyd, editor, Advances in Cryptology – ASIACRYPT 2001, volume 2248 of Lecture Notes in Computer Science, pages 566–582. Springer-Verlag, Dec. 2001.
4. M. Bellare, A. Desai, E. Jokipii, and P. Rogaway. A concrete security treatment of symmetric encryption. In Proceedings of the 38th Annual Symposium on Foundations of Computer Science, pages 394–403. IEEE Computer Society Press, 1997.
5. A. Beresford and F. Stajano. Location privacy in pervasive computing. In IEEE Pervasive Computing, January 2003.
6. BlueTags to install world’s first Bluetooth tracking system, 2003. http://www.geekzone.co.nz/content.asp?contentid=1070.
7. Bluetooth Spam in Public Places. http://it.slashdot.org/it/07/01/28/2114253. shtml.
8. Braces – A Bluetooth Tracking Utility. http://braces.shmoo.com/.
9. D. Chaum and E. van Heyst. Group signatures. In D. W. Davies, editor, Advances in Cryptology – EUROCRYPT’91, volume 547 of Lecture Notes in Computer Science, pages 257–265, 1991.
10. J. Collins. Lost and Found in Legoland, RFID Journal, 2004. http://www.rfidjournal.com/article/articleview/921/1/1/.
11. J. Cornwell, I. Fette, G. Hsieh, M. Prabaker, J. Rao, K. Tang, K. Vaniea, L. Bauer, L. Cranor, J. Hong, B. McLaren, M. Reiter, and N. Sadeh. User-controllable security and privacy for pervsaive computing. In 8th IEEE Workshop on Mobile Computing Systems and Applications (HotMobile 2007), 2007.
12. Y. Duan and J. Canny. Protecting user data in ubiquitous computing environments: Towards trustworthy environments. In Workshop on Privacy Enhancing Technology, 2004.
13. C. Faloutsos, M. Ranganathan, and Y. Manolopoulos. Fast subsequence matching in time-series databases. ACM SIGMOD Record, 23(2):419–429, 1994.
14. FT2232C Dual USB UARF/FIFO IC. http://www.ftdichip.com/Products/FT2232C.htm.
15. M. Gruteser and D. Grunwald. A methodological assessment of location privacy risks in wireless hotspot networks. In First International Conference on Security in Pervasive Computing, 2003.
16. M. Gruteser and D. Grunwald. Enhancing location privacy in wireless LAN through disposable interface identifiers: A quantitative analysis. In ACM Mobile Networks and Applications (MONET), volume 10, pages 315–325, Hingham, MA, USA, 2005. Kluwer Academic Publishers.
17. M. Haase and M. Handy. BlueTrack – Imperceptible tracking of bluetooth devices. In Ubicomp Poster Proceedings, 2004.
18. T. Hastie, R. Tibshirani, J. Friedman, et al. The elements of statistical learning: data mining, inference, and prediction. Springer, 2001.
19. J. I. Hong and J. A. Landay. An architecture for privacy-sensitive ubiquitous computing. In Second International Conference on Mobile Systems, Applications, and Services (Mobisys 2004), 2004.
20. J. I. Hong and J. A. Landay. Privacy risk models for designing privacy-sensitive ubiquitous computing systems. In Designing Interactive Systems (DIS2004), 2004.
21. Y.-C. Hu and H. J. Wang. A framework for location privacy in wireless networks. In ACM SIGCOMM Asia Workshop, 2005.
22. G. Iachello, I. Smith, S. Consolvo, M. chen, and G. Abowd. Developing privacy guidelines for social location disclosure applications and services. In Symposium on Usable Privacy and Security, 2005.
23. iPod Connector Female SMD. http://www.sparkfun.com/commerce/product_info. php?products_id=8035.
24. iPod Linux. http://ipodlinux.org/Dock_ Connector.
25. A. Jacobs and G. Abowd. A framework for comparing perspectives on privacy and pervasive technologies. In IEEE Pervasive Computing Magazine. Volume 2, Number 4, October-December, 2003.
26. M. Jakobsson and S. Wetzel. Security weaknesses in bluetooth. In 2001 Conference on Topics in Cryptography, 2001.
27. A. Juels. RFID security and privacy: A research survey. In IEEE Journal on Selected Areas in Communications, 2006.
28. A. Juels and S. Weis. Authenticating pervasive devices with human protocols. In 25th Annual International Cryptography Conference, August 2005.
29. A. LaMarca, Y. Chawathe, S. Consolvo, J. Hightower, I. Smith, J. Scott, timothy Sohn, J. Howard, J. Hughes, F. Potter, J. Tabert, P. Powledge, G. Borriello, and B. Schilit. Place lab: Device positioning using radio beacons in the wild. In Third International Conference on Pervasive Computing, 2005.
30. M. Liberatore and B. N. Levine. Inferring the Source of Encrypted HTTP Connections. In Proc. ACM conference on Computer and Communications Security (CCS), October 2006.
31. Loca – About Loca. http://www.loca-lab.org/.
32. Microsofts Zune Delivers Connected Music and Entertainment Experience. http://www.microsoft.com/presspass/press/2006/sep06/ 09-14ZuneUnveiling%PR.mspx.
33. D. Molnar and D. Wagner. Privacy and security in library RFID issues, practices, and architectures. In 11th ACM Conference on Computer and Communications Security (CCS 2004), 2004.
34. G. Myles, A. Friday, and N. Davies. Preserving privacy in environments with location-based applications. In IEEE Pervasive Computing, 2003.
35. Nike and Apple Lanch Nike+iPod Sport Kit (for real). http://www.engadget.com/2006/07/13/ nike-and-apple-launch-nike-ipod-sportkit-for-real/.
36. Nike + iPod Frequently Asked Questions (Technical). http://docs.info.apple.com/article.html?artnum=303934. Last accessed on November 12, 2006.
37. E. O’Neill, V. Kostakos, T. Kindberg, A. F. gen. Schieck, A. Penn, D. S. Fraser, and T. Jones. Instrumenting the city: Developing methods for observing and understanding the digital cityscape. In Ubicomp, 2006.
38. S. Orfanidis. Introduction to Signal Processing. Inglewood Cliffs. NJ: Prentice-Hall, 1996.
39. M. Pels, J. Barhorst, M. Michels, R. Hobo, and J. Barendse. Tracking people using bluetooth: Implications of enabling bluetooth discoverable mode, 2005. Manuscript.
40. Sling Media Announces SlingCatcher. http://us.slingmedia.com/object/io_ 1168286861787.html.
41. Sling Media’s Newly-Released SlingBox Uses Microsoft Windows Media and Texas Instruments Digital Media Technology to Deliver On-the-Go Entertainment. http://us.slingmedia.com/object/io_1157566629962.html.
42. S. A. Weis, S. E. Sarma, R. L. Rivest, and D. W. Engels. Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems. In Security in Pervasive Computing, 2004.
43. WireShark. http://www.wireshark.org.
44. F.-L. Wong and F. Stajano. Location privacy in bluetooth. In 2nd European Workshop on Security and Privacy in Ad hoc and Sensor Networks, 2005.
45. C. Wright, F. Monrose, and G. Masson. On Inferring Application Protocol Behaviors in Encrypted Network Traffic. In Journal of Machine Learning Research (JMLR): Special issue on Machine Learning for Computer Security, 2006.
46. C. V. Wright, L. Ballard, F. Monrose, and G. M. Masson. Language identification of encrypted VoIP traffic: Alejandra y Roberto or Alice and Bob? In 16th Usenix Security Symposium, 2007.