ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices

Vasaka Visoottiviseth; Teerapat Khengthong; Kanlayakorn Kesorn; Jittipat Patcharadechathorn

doi:10.1109/ICSEC53205.2021.9684659

ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices

Vasaka Visoottiviseth
, Teerapat Khengthong
, Kanlayakorn Kesorn
, Jittipat Patcharadechathorn

Computer Science Academic Group

Mahidol University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Citations (Scopus)

Abstract

At the present, the Internet of Things (IoT) technology is widely accessible, especially for smart home devices. These smart home devices are used in daily life and may contain user's privacy information. Users of these devices should know about the related privacy laws and realize the fundamental rights to protect their personal data. Thus, in this paper we aim to develop an educational toolkit called ASPAHI. ASPAHI contains two main components: A web application and a vulnerability assessment (VA) program. ASPAHI web application is designed to educate users about Thai Personal Data Protection ACT (PDPA) and OWASP IoT Top 10. On the other hand, ASPAHI VA program is designed to help users assess vulnerabilities of their smart home devices. We verified the effectiveness of our program with 50 participants by asking them to do the pre-Test quiz, learn on ASPAHI web application, do the post-Test quiz, and answer the questionnaire. Evaluation results show high improvement in learning. Moreover, most users gave 4 scores for the overall program satisfaction.

Original language	English
Title of host publication	ICSEC 2021 - 25th International Computer Science and Engineering Conference
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	388-393
Number of pages	6
ISBN (Electronic)	9781665411974
DOIs	https://doi.org/10.1109/ICSEC53205.2021.9684659
Publication status	Published - 2021
Event	25th International Computer Science and Engineering Conference, ICSEC 2021 - Virtual, Online, Thailand Duration: 18 Nov 2021 → 20 Nov 2021

Publication series

Name	ICSEC 2021 - 25th International Computer Science and Engineering Conference

Conference

Conference	25th International Computer Science and Engineering Conference, ICSEC 2021
Country/Territory	Thailand
City	Virtual, Online
Period	18/11/21 → 20/11/21

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 16 Peace, Justice and Strong Institutions

Keywords

Internet of Things
OWASP IoT Top 10
Personal Data Protection Act
Privacy
Security Education
Smart Home

Access to Document

10.1109/ICSEC53205.2021.9684659

Cite this

Visoottiviseth, V., Khengthong, T., Kesorn, K., & Patcharadechathorn, J. (2021). ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices. In ICSEC 2021 - 25th International Computer Science and Engineering Conference (pp. 388-393). (ICSEC 2021 - 25th International Computer Science and Engineering Conference). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICSEC53205.2021.9684659

Visoottiviseth, Vasaka ; Khengthong, Teerapat ; Kesorn, Kanlayakorn et al. / ASPAHI : Application for Security and Privacy Awareness Education for Home IoT Devices. ICSEC 2021 - 25th International Computer Science and Engineering Conference. Institute of Electrical and Electronics Engineers Inc., 2021. pp. 388-393 (ICSEC 2021 - 25th International Computer Science and Engineering Conference).

@inproceedings{8a728bdb5b724c1290b524f289a629d5,

title = "ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices",

abstract = "At the present, the Internet of Things (IoT) technology is widely accessible, especially for smart home devices. These smart home devices are used in daily life and may contain user's privacy information. Users of these devices should know about the related privacy laws and realize the fundamental rights to protect their personal data. Thus, in this paper we aim to develop an educational toolkit called ASPAHI. ASPAHI contains two main components: A web application and a vulnerability assessment (VA) program. ASPAHI web application is designed to educate users about Thai Personal Data Protection ACT (PDPA) and OWASP IoT Top 10. On the other hand, ASPAHI VA program is designed to help users assess vulnerabilities of their smart home devices. We verified the effectiveness of our program with 50 participants by asking them to do the pre-Test quiz, learn on ASPAHI web application, do the post-Test quiz, and answer the questionnaire. Evaluation results show high improvement in learning. Moreover, most users gave 4 scores for the overall program satisfaction.",

keywords = "Internet of Things, OWASP IoT Top 10, Personal Data Protection Act, Privacy, Security Education, Smart Home",

author = "Vasaka Visoottiviseth and Teerapat Khengthong and Kanlayakorn Kesorn and Jittipat Patcharadechathorn",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 25th International Computer Science and Engineering Conference, ICSEC 2021 ; Conference date: 18-11-2021 Through 20-11-2021",

year = "2021",

doi = "10.1109/ICSEC53205.2021.9684659",

language = "English",

series = "ICSEC 2021 - 25th International Computer Science and Engineering Conference",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "388--393",

booktitle = "ICSEC 2021 - 25th International Computer Science and Engineering Conference",

}

Visoottiviseth, V, Khengthong, T, Kesorn, K & Patcharadechathorn, J 2021, ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices. in ICSEC 2021 - 25th International Computer Science and Engineering Conference. ICSEC 2021 - 25th International Computer Science and Engineering Conference, Institute of Electrical and Electronics Engineers Inc., pp. 388-393, 25th International Computer Science and Engineering Conference, ICSEC 2021, Virtual, Online, Thailand, 18/11/21. https://doi.org/10.1109/ICSEC53205.2021.9684659

ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices. / Visoottiviseth, Vasaka; Khengthong, Teerapat; Kesorn, Kanlayakorn et al.
ICSEC 2021 - 25th International Computer Science and Engineering Conference. Institute of Electrical and Electronics Engineers Inc., 2021. p. 388-393 (ICSEC 2021 - 25th International Computer Science and Engineering Conference).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - ASPAHI

T2 - 25th International Computer Science and Engineering Conference, ICSEC 2021

AU - Visoottiviseth, Vasaka

AU - Khengthong, Teerapat

AU - Kesorn, Kanlayakorn

AU - Patcharadechathorn, Jittipat

PY - 2021

Y1 - 2021

N2 - At the present, the Internet of Things (IoT) technology is widely accessible, especially for smart home devices. These smart home devices are used in daily life and may contain user's privacy information. Users of these devices should know about the related privacy laws and realize the fundamental rights to protect their personal data. Thus, in this paper we aim to develop an educational toolkit called ASPAHI. ASPAHI contains two main components: A web application and a vulnerability assessment (VA) program. ASPAHI web application is designed to educate users about Thai Personal Data Protection ACT (PDPA) and OWASP IoT Top 10. On the other hand, ASPAHI VA program is designed to help users assess vulnerabilities of their smart home devices. We verified the effectiveness of our program with 50 participants by asking them to do the pre-Test quiz, learn on ASPAHI web application, do the post-Test quiz, and answer the questionnaire. Evaluation results show high improvement in learning. Moreover, most users gave 4 scores for the overall program satisfaction.

AB - At the present, the Internet of Things (IoT) technology is widely accessible, especially for smart home devices. These smart home devices are used in daily life and may contain user's privacy information. Users of these devices should know about the related privacy laws and realize the fundamental rights to protect their personal data. Thus, in this paper we aim to develop an educational toolkit called ASPAHI. ASPAHI contains two main components: A web application and a vulnerability assessment (VA) program. ASPAHI web application is designed to educate users about Thai Personal Data Protection ACT (PDPA) and OWASP IoT Top 10. On the other hand, ASPAHI VA program is designed to help users assess vulnerabilities of their smart home devices. We verified the effectiveness of our program with 50 participants by asking them to do the pre-Test quiz, learn on ASPAHI web application, do the post-Test quiz, and answer the questionnaire. Evaluation results show high improvement in learning. Moreover, most users gave 4 scores for the overall program satisfaction.

KW - Internet of Things

KW - OWASP IoT Top 10

KW - Personal Data Protection Act

KW - Privacy

KW - Security Education

KW - Smart Home

UR - https://www.scopus.com/pages/publications/85125173199

U2 - 10.1109/ICSEC53205.2021.9684659

DO - 10.1109/ICSEC53205.2021.9684659

M3 - Conference contribution

AN - SCOPUS:85125173199

T3 - ICSEC 2021 - 25th International Computer Science and Engineering Conference

SP - 388

EP - 393

BT - ICSEC 2021 - 25th International Computer Science and Engineering Conference

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 18 November 2021 through 20 November 2021

ER -

Visoottiviseth V, Khengthong T, Kesorn K, Patcharadechathorn J. ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices. In ICSEC 2021 - 25th International Computer Science and Engineering Conference. Institute of Electrical and Electronics Engineers Inc. 2021. p. 388-393. (ICSEC 2021 - 25th International Computer Science and Engineering Conference). doi: 10.1109/ICSEC53205.2021.9684659

ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices

Abstract

Publication series

Conference

UN SDGs

Keywords

Access to Document

Other files and links

Fingerprint

Cite this