{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T00:10:38Z","timestamp":1778976638191,"version":"3.51.4"},"reference-count":43,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2018,7,27]],"date-time":"2018-07-27T00:00:00Z","timestamp":1532649600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2018,7,27]]},"abstract":"<jats:p>\n            Networked sensors and actuators are increasingly permeating our computing devices, and provide a variety of functions for Internet of Things (IoT) devices and applications. However, this sensor data can also be used by applications to extract private information about users. Applications and users are thus in a\n            <jats:italic>tussle<\/jats:italic>\n            over access to private data. Tussles occur in operating systems when stakeholders with competing interests try to access shared resources such as sensor data, CPU time, or network bandwidth. Unfortunately, existing operating systems lack a principled approach for identifying, tracking, and resolving such tussles. Moreover, users typically have little control over how tussles are resolved. Controls for sensor data tussles, for example, often fail to address trade-offs between functionality and privacy. Therefore, we propose a framework to explicitly recognize and manage tussles. Using sensor data as an example resource, we investigate the design of mechanisms for detecting and resolving privacy tussles in a cyber-physical system, enabling privacy and functionality to be negotiated between users and applications. In doing so, we identify shortcomings of existing research and present directions for future work.\n          <\/jats:p>","DOI":"10.1145\/3243157.3243160","type":"journal-article","created":{"date-parts":[[2018,7,31]],"date-time":"2018-07-31T19:41:18Z","timestamp":1533066078000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["TussleOS"],"prefix":"10.1145","volume":"46","author":[{"given":"Rayman Preet","family":"Singh","sequence":"first","affiliation":[{"name":"University of Waterloo"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Benjamin","family":"Cassell","sequence":"additional","affiliation":[{"name":"University of Waterloo"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S.","family":"Keshav","sequence":"additional","affiliation":[{"name":"University of Waterloo"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Brecht","sequence":"additional","affiliation":[{"name":"University of Waterloo"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,7,27]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Android SDK. http:\/\/developer.android.com.  Android SDK. http:\/\/developer.android.com."},{"key":"e_1_2_1_2_1","unstructured":"Nest. http:\/\/www.nest.com\/.  Nest. http:\/\/www.nest.com\/."},{"key":"e_1_2_1_3_1","unstructured":"Popular Android Apps Leak Sensitive User Data. https:\/\/blog.kaspersky.com\/privacy_holes_in_popular_android_apps\/.  Popular Android Apps Leak Sensitive User Data. https:\/\/blog.kaspersky.com\/privacy_holes_in_popular_android_apps\/."},{"key":"e_1_2_1_4_1","unstructured":"Raspberry Pi. https:\/\/www.raspberrypi.org\/.  Raspberry Pi. https:\/\/www.raspberrypi.org\/."},{"key":"e_1_2_1_5_1","unstructured":"The Internet of Things. http:\/\/share.cisco.com\/internet-of-things.html\/.  The Internet of Things. http:\/\/share.cisco.com\/internet-of-things.html\/."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464460"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2184489.2184500"},{"key":"e_1_2_1_8_1","volume-title":"Proc. USENIX NSDI","author":"Chakraborty S.","year":"2014","unstructured":"Chakraborty , S. , Shen , C. , Raghavan , K. R. , Shoukry , Y. , Millar , M. , and Srivastava , M . ipShield: a framework for enforcing context-aware privacy . In Proc. USENIX NSDI ( 2014 ). Chakraborty, S., Shen, C., Raghavan, K. R., Shoukry, Y., Millar, M., and Srivastava, M. ipShield: a framework for enforcing context-aware privacy. In Proc. USENIX NSDI (2014)."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.4108\/icst.pervasivehealth.2013.252148"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335358"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/964725.633059"},{"key":"e_1_2_1_12_1","volume-title":"USENIX NSDI","author":"Dixon C.","year":"2012","unstructured":"Dixon , C. , Mahajan , R. , Agarwal , S. , Brush , A. J. , Lee , B. , Saroiu , S. , and Bahl , P . An operating system for the home . In USENIX NSDI ( 2012 ). Dixon, C., Mahajan, R., Agarwal, S., Brush, A. J., Lee, B., Saroiu, S., and Bahl, P. An operating system for the home. In USENIX NSDI (2012)."},{"key":"e_1_2_1_13_1","volume-title":"Proc. NDSS","author":"Egele M.","year":"2011","unstructured":"Egele , M. , Kruegel , C. , Kirda , E. , and Vigna , G . PiOS: Detecting privacy leaks in iOS applications . In Proc. NDSS ( 2011 ). Egele, M., Kruegel, C., Kirda, E., and Vigna, G. PiOS: Detecting privacy leaks in iOS applications. In Proc. NDSS (2011)."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_2_1_17_1","volume-title":"USENIX NSDI","author":"Gupta T.","year":"2014","unstructured":"Gupta , T. , Singh , R. P. , Phanishayee , A. , Jung , J. , and Mahajan , R . Bolt: Data management for connected homes . In USENIX NSDI ( 2014 ). Gupta, T., Singh, R. P., Phanishayee, A., Jung, J., and Mahajan, R. Bolt: Data management for connected homes. In USENIX NSDI (2014)."},{"key":"e_1_2_1_18_1","volume-title":"Personal data: Thinking inside the box. arXiv:1501.04737","author":"Haddadi H.","year":"2015","unstructured":"Haddadi , H. , Howard , H. , Chaudhry , A. , Crowcroft , J. , Madhavapeddy , A. , and Mortier , R . Personal data: Thinking inside the box. arXiv:1501.04737 ( 2015 ). Haddadi, H., Howard, H., Chaudhry, A., Crowcroft, J., Madhavapeddy, A., and Mortier, R. Personal data: Thinking inside the box. arXiv:1501.04737 (2015)."},{"key":"e_1_2_1_19_1","volume-title":"Proc. ACM SimAUD","author":"Hailemariam E.","year":"2011","unstructured":"Hailemariam , E. , Goldstein , R. , Attar , R. , and Khan , A . Real-time occupancy detection using decision trees with multiple sensor types . In Proc. ACM SimAUD ( 2011 ). Hailemariam, E., Goldstein, R., Attar, R., and Khan, A. Real-time occupancy detection using decision trees with multiple sensor types. In Proc. ACM SimAUD (2011)."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517351.2517359"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1107548.1107591"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2509136.2509541"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITB.2005.856864"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294293"},{"key":"e_1_2_1_25_1","volume-title":"Proc. USENIX NSDI","author":"Lee S.","year":"2013","unstructured":"Lee , S. , Wong , E. L. , Goel , D. , Dahlin , M. , and Shmatikov , V . &pi;box: a platform for privacy-preserving apps . In Proc. USENIX NSDI ( 2013 ). Lee, S., Wong, E. L., Goel, D., Dahlin, M., and Shmatikov, V. &pi;box: a platform for privacy-preserving apps. In Proc. USENIX NSDI (2013)."},{"key":"e_1_2_1_26_1","first-page":"177","volume-title":"USENIX ATC '15 (July","author":"Li T.","year":"2015","unstructured":"Li , T. , Rafetseder , A. , Fonseca , R. , and Cappos , J . Fence: Protecting device availability with uniform resource control . In USENIX ATC '15 (July 2015 ), USENIX, pp. 177 -- 191 . Li, T., Rafetseder, A., Fonseca, R., and Cappos, J. Fence: Protecting device availability with uniform resource control. In USENIX ATC '15 (July 2015), USENIX, pp. 177--191."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307670"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2499368.2451167"},{"key":"e_1_2_1_29_1","volume-title":"Proc. USENIX SEC","author":"Michalevsky Y.","year":"2014","unstructured":"Michalevsky , Y. , Boneh , D. , and Nakibly , G . Gyrophone: Recognizing speech from gyroscope signals . In Proc. USENIX SEC ( 2014 ). Michalevsky, Y., Boneh, D., and Nakibly, G. Gyrophone: Recognizing speech from gyroscope signals. In Proc. USENIX SEC (2014)."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755732"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464446"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1689239.1689243"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.24"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660319"},{"key":"e_1_2_1_35_1","volume-title":"Proc. USENIX HotOS","author":"Santos N.","year":"2015","unstructured":"Santos , N. , Duarte , N. O. , Costa , M. B. , and Ferreira , P . A case for enforcing app-specific constraints to mobile devices by using trust leases . In Proc. USENIX HotOS ( 2015 ). Santos, N., Duarte, N. O., Costa, M. B., and Ferreira, P. A case for enforcing app-specific constraints to mobile devices by using trust leases. In Proc. USENIX HotOS (2015)."},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541949"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2030112.2030151"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487166.2487174"},{"key":"e_1_2_1_39_1","volume-title":"Proc. USENIX HotOS","author":"Singh R. P.","year":"2015","unstructured":"Singh , R. P. , Shen , C. , Phanishayee , A. , Kansal , A. , and Mahajan , R . A case for ending monolithic apps for connected devices . In Proc. USENIX HotOS ( 2015 ). Singh, R. P., Shen, C., Phanishayee, A., Kansal, A., and Mahajan, R. A case for ending monolithic apps for connected devices. In Proc. USENIX HotOS (2015)."},{"key":"e_1_2_1_40_1","volume-title":"Proc. USENIX OSDI","author":"Spahn R.","year":"2014","unstructured":"Spahn , R. , Bell , J. , Lee , M. Z. , Bhamidipati , S. , Geambasu , R. , and Kaiser , G . Pebbles: Fine-grained data management abstractions for modern operating systems . In Proc. USENIX OSDI ( 2014 ). Spahn, R., Bell, J., Lee, M. Z., Bhamidipati, S., Geambasu, R., and Kaiser, G. Pebbles: Fine-grained data management abstractions for modern operating systems. In Proc. USENIX OSDI (2014)."},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2013.6698893"},{"key":"e_1_2_1_42_1","first-page":"293","volume-title":"Proc. NSDI '12","volume":"8","author":"Zeldovich N.","year":"2008","unstructured":"Zeldovich , N. , Boyd-Wickizer , S. , and Mazieres , D . Securing distributed systems with information flow control . In Proc. NSDI '12 ( 2008 ), vol. 8 , pp. 293 -- 308 . Zeldovich, N., Boyd-Wickizer, S., and Mazieres, D. Securing distributed systems with information flow control. In Proc. NSDI '12 (2008), vol. 8, pp. 293--308."},{"key":"e_1_2_1_43_1","volume-title":"Applied Mechanics and Materials","author":"Zhang P. H.","year":"2014","unstructured":"Zhang , P. H. , Li , J. Z. , Shao , S. , and Wang , P . Pdroid: Detecting privacy leakage on android . In Applied Mechanics and Materials ( 2014 ). Zhang, P. H., Li, J. Z., Shao, S., and Wang, P. Pdroid: Detecting privacy leakage on android. In Applied Mechanics and Materials (2014)."}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243157.3243160","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243157.3243160","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:57:39Z","timestamp":1750208259000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243157.3243160"}},"subtitle":["managing privacy versus functionality trade-offs on IoT devices"],"short-title":[],"issued":{"date-parts":[[2018,7,27]]},"references-count":43,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2018,7,27]]}},"alternative-id":["10.1145\/3243157.3243160"],"URL":"https:\/\/doi.org\/10.1145\/3243157.3243160","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2018,7,27]]},"assertion":[{"value":"2018-07-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}