一句话：提出动态测试方法 Taifu，以 applet 为测试用例，发现多参与方触发-动作集成平台中的隐私弱点。
本文研究多参与方触发-动作集成平台（TAIP）中的隐私问题。由于平台连接异构 IoT 系统与在线服务，各参与方数据控制策略可能不同甚至冲突，触发器与动作在生成、传输等生命周期中易产生隐私违规。作者先刻画此类违规，进而提出动态测试方法 Taifu，其核心洞察是：实际编写触发-动作规则的 applet 可作为测试用例，用于探索 TAIP 行为。在基于 IFTTT 构建的 TAIP 上评估，自动生成 407 个 applet（各来自不同 TAIP），检测到 194 个访问策略违背、218 个访问控制缺失、90 个访问撤销缺失、15 个非预期数据流和 73 个过度权限访问。
With many trigger-action platforms that integrate Internet of Things (IoT) systems and online services, rich functionalities transparently connecting digital and physical worlds become easily accessible for the end users. On the other hand, such facilities incorporate multiple parties whose data control policies may radically differ and even contradict each other, and thus privacy violations may arise throughout the lifecycle (e.g., generation and transmission) of triggers and actions. In this work, we conduct an in-depth study on the privacy issues in multi-party trigger-action integration platforms (TAIPs). We first characterize privacy violations that may arise with the integration of heterogeneous systems and services. Based on this knowledge, we propose Taifu, a dynamic testing approach to identify privacy weaknesses from the TAIP. The key insight of Taifu is that the applets which actually program the trigger-action rules can be used as test cases to explore the behavior of the TAIP. We evaluate the effectiveness of our approach by applying it on the TAIPs that are built around the IFTTT platform. To our great surprise, we find that privacy violations are prevalent among them. Using the automatically generated 407 applets, each from a different TAIP, Taifu detects 194 cases with access policy breaches, 218 access control missing, 90 access revocation missing, 15 unintended flows, and 73 over-privilege access.
@inproceedings{paperbot6698,
title = {Identifying privacy weaknesses from multi-party trigger-action integration platforms},
author = {Kulani Mahadewa and Yanjun Zhang and Guangdong Bai and Lei Bu and Zhiqiang Zuo and Dileepa Fernando and Zhenkai Liang and Jin Song Dong},
booktitle = {ISSTA},
year = {2021},
doi = {10.1145/3460319.3464838}
}