ASPAHI: Application for Security and Privacy Awareness Education for Home IoT Devices

Abstract

At the present, the Internet of Things (IoT) technology is widely accessible, especially for smart home devices. These smart home devices are used in daily life and may contain user's privacy information. Users of these devices should know about the related privacy laws and realize the fundamental rights to protect their personal data. Thus, in this paper we aim to develop an educational toolkit called ASPAHI. ASPAHI contains two main components: A web application and a vulnerability assessment (VA) program. ASPAHI web application is designed to educate users about Thai Personal Data Protection ACT (PDPA) and OWASP IoT Top 10. On the other hand, ASPAHI VA program is designed to help users assess vulnerabilities of their smart home devices. We verified the effectiveness of our program with 50 participants by asking them to do the pre-Test quiz, learn on ASPAHI web application, do the post-Test quiz, and answer the questionnaire. Evaluation results show high improvement in learning. Moreover, most users gave 4 scores for the overall program satisfaction.