{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T13:07:07Z","timestamp":1780664827993,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":86,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,26]],"date-time":"2026-04-26T00:00:00Z","timestamp":1777161600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,27]]},"DOI":"10.1145\/3767295.3769352","type":"proceedings-article","created":{"date-parts":[[2026,4,24]],"date-time":"2026-04-24T20:20:04Z","timestamp":1777062004000},"page":"1330-1348","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Turnstile: Hybrid Information Flow Control Framework for Managing Privacy in Internet-of-Things Applications"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8791-1568","authenticated-orcid":false,"given":"Kumseok","family":"Jung","sequence":"first","affiliation":[{"name":"University of British Columbia, Vancouver, British Columbia, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0120-7630","authenticated-orcid":false,"given":"Mohanna","family":"Shahrad","sequence":"additional","affiliation":[{"name":"Princeton University, Princeton, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8011-4590","authenticated-orcid":false,"given":"Gargi","family":"Mitra","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, British Columbia, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2380-3415","authenticated-orcid":false,"given":"Karthik","family":"Pattabiraman","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, British Columbia, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,4,26]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"81","article-title":"California Consumer Privacy Act of 2018. CAL. CIV","volume":"1","year":"2018","unstructured":"2018. California Consumer Privacy Act of 2018. CAL. CIV, TITLE 1.81.5., Ch.55, Sec. 3 (2018). https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5","journal-title":"TITLE"},{"key":"e_1_3_2_1_2_1","unstructured":"2024. AWS IoT Greengrass Documentation. https:\/\/docs.aws.amazon.com\/greengrass\/."},{"key":"e_1_3_2_1_3_1","unstructured":"2024. Azure IoT Hub Documentation. https:\/\/learn.microsoft.com\/en-ca\/azure\/iot-hub\/."},{"key":"e_1_3_2_1_4_1","unstructured":"2024. SmartApp SDK - Node.js. https:\/\/developer.smartthings.com\/docs\/sdks\/smartapp-nodejs."},{"key":"e_1_3_2_1_5_1","unstructured":"2025. Homebridge. https:\/\/homebridge.io\/."},{"key":"e_1_3_2_1_6_1","unstructured":"2025. openHAB. https:\/\/www.openhab.org\/docs\/."},{"key":"e_1_3_2_1_7_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ahmadpanah Mohammad M","year":"2021","unstructured":"Mohammad M Ahmadpanah, Daniel Hedin, Musard Balliu, Lars Eric Olsson, and Andrei Sabelfeld. 2021. {SandTrap}: Securing {JavaScript-driven} {Trigger-Action} Platforms. In 30th USENIX Security Symposium (USENIX Security 21). 2899\u20132916."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1995376.1995398"},{"key":"e_1_3_2_1_9_1","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Bates Adam","year":"2015","unstructured":"Adam Bates, Dave Jing Tian, Kevin RB Butler, and Thomas Moyer. 2015. Trustworthy {Whole-System} provenance for the linux kernel. In 24th USENIX Security Symposium (USENIX Security 15). 319\u2013334."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP57164.2023.00068"},{"key":"e_1_3_2_1_11_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Celik Z Berkay","year":"2018","unstructured":"Z Berkay Celik, Leonardo Babun, Amit Kumar Sikder, Hidayet Aksu, Gang Tan, Patrick McDaniel, and A Selcuk Uluagac. 2018. Sensitive information tracking in commodity {IoT}. In 27th USENIX Security Symposium (USENIX Security 18). 1687\u20131704."},{"key":"e_1_3_2_1_12_1","volume-title":"Soteria: Automated {IoT} safety and security analysis. In 2018 USENIX annual technical conference (USENIX ATC 18). 147\u2013158.","author":"Celik Z Berkay","year":"2018","unstructured":"Z Berkay Celik, Patrick McDaniel, and Gang Tan. 2018. Soteria: Automated {IoT} safety and security analysis. In 2018 USENIX annual technical conference (USENIX ATC 18). 147\u2013158."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243823"},{"key":"e_1_3_2_1_14_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Chen Yunang","year":"2022","unstructured":"Yunang Chen, Mohannad Alhanahnah, Andrei Sabelfeld, Rahul Chatterjee, and Earlence Fernandes. 2022. Practical data access minimization in {Trigger-Action} platforms. In 31st USENIX Security Symposium (USENIX Security 22). 2929\u20132945."},{"key":"e_1_3_2_1_15_1","volume-title":"2012 USENIX Annual Technical Conference (USENIX ATC 12)","author":"Cheng Winnie","year":"2012","unstructured":"Winnie Cheng, Dan RK Ports, David Schultz, Victoria Popic, Aaron Blankstein, James Cowling, Dorothy Curtis, Liuba Shrira, and Barbara Liskov. 2012. Abstractions for usable information flow control in Aeolus. In 2012 USENIX Annual Technical Conference (USENIX ATC 12). 139\u2013151."},{"key":"e_1_3_2_1_16_1","volume-title":"Network and Distributed Systems Symposium.","author":"Chi Haotian","year":"2021","unstructured":"Haotian Chi, Qiang Zeng, Xiaojiang Du, and Lannan Luo. 2021. Pfirewall: Semantics-aware customizable data flow control for home automation systems. In Network and Distributed Systems Symposium."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813684"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382275"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/359636.359712"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.43"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484745"},{"key":"e_1_3_2_1_24_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 531\u2013548.","author":"Fernandes Earlence","unstructured":"Earlence Fernandes, Justin Paupore, Amir Rahmati, Daniel Simionato, Mauro Conti, and Atul Prakash. 2016. {FlowFence}: Practical data protection for emerging {IoT} application frameworks. In 25th USENIX security symposium (USENIX Security 16). 531\u2013548."},{"key":"e_1_3_2_1_25_1","unstructured":"IoT Security Foundation. 2019. Secure design best practice guides. https:\/\/iotsecurityfoundation.org\/wp-content\/uploads\/2019\/12\/Best-Practice-Guides-Release-2_Digitalv3.pdf. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_26_1","unstructured":"OpenJS Foundation. 2024. Express - Node.js web application framework. https:\/\/expressjs.com\/. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_27_1","unstructured":"OpenJS Foundation. 2024. Node-RED. https:\/\/nodered.org\/. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35170-9_6"},{"key":"e_1_3_2_1_29_1","volume-title":"10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12)","author":"Giffin Daniel B","year":"2012","unstructured":"Daniel B Giffin, Amit Levy, Deian Stefan, David Terei, David Mazieres, John C Mitchell, and Alejandro Russo. 2012. Hails: Protecting data privacy in untrusted web applications. In 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12). 47\u201360."},{"key":"e_1_3_2_1_30_1","first-page":"110","article-title":"Information flow analysis of android applications in droidsafe","volume":"15","author":"Gordon Michael I","year":"2015","unstructured":"Michael I Gordon, Deokhwan Kim, Jeff H Perkins, Limei Gilham, Nguyen Nguyen, and Martin C Rinard. 2015. Information flow analysis of android applications in droidsafe.. In NDSS, Vol. 15. 110.","journal-title":"NDSS"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2554850.2554909"},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings 12","author":"Hosek Petr","year":"2011","unstructured":"Petr Hosek, Matteo Migliavacca, Ioannis Papagiannis, David M Eyers, David Evans, Brian Shand, Jean Bacon, and Peter Pietzuch. 2011. SafeWeb: A Middleware for Securing Ruby-Based Web Applications. In Middleware 2011: ACM\/IFIP\/USENIX 12th International Middleware Conference, Lisbon, Portugal, December 12\u201316, 2011. Proceedings 12. Springer, 491\u2013511."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1238844.1238856"},{"key":"e_1_3_2_1_34_1","unstructured":"Github Inc. 2024. CodeQL. https:\/\/codeql.github.com\/. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_35_1","unstructured":"Ecma International. 2015. ECMAScript 2015 Language Specification. https:\/\/ecma-international.org\/wp-content\/uploads\/ECMA-262_6th_edition_june_2015.pdf."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866339"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03237-0_17"},{"key":"e_1_3_2_1_38_1","volume-title":"Shiqi Wang, Amir Rahmati, Earlence Fernandes, Zhuoqing Morley Mao, Atul Prakash, and SJ Unviersity.","author":"Jia Yunhan Jack","year":"2017","unstructured":"Yunhan Jack Jia, Qi Alfred Chen, Shiqi Wang, Amir Rahmati, Earlence Fernandes, Zhuoqing Morley Mao, Atul Prakash, and SJ Unviersity. 2017. ContexloT: Towards providing contextual integrity to appified IoT platforms.. In ndss, Vol. 2. San Diego, 2\u20132."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179352"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2878020"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.128"},{"key":"e_1_3_2_1_43_1","volume-title":"JRIF: reactive information flow control for java. Foundations of Security, Protocols, and Equational Reasoning: Essays Dedicated to Catherine A. Meadows","author":"Kozyri Elisavet","year":"2019","unstructured":"Elisavet Kozyri, Owen Arden, Andrew C Myers, and Fred B Schneider. 2019. JRIF: reactive information flow control for java. Foundations of Security, Protocols, and Equational Reasoning: Essays Dedicated to Catherine A. Meadows (2019), 70\u201388."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1323293.1294293"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274371"},{"key":"e_1_3_2_1_46_1","unstructured":"Xavier Leroy Jerome Vouillon Damien Doligez and Didier Remy. [n. d.]. Why OCaml? \u2014 ocaml.org. https:\/\/ocaml.org\/about. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_47_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Li Song","year":"2022","unstructured":"Song Li, Mingqing Kang, Jianwei Hou, and Yinzhi Cao. 2022. Mining node.js vulnerabilities via object dependence graph and query. In 31st USENIX Security Symposium (USENIX Security 22). 143\u2013160."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629606"},{"key":"e_1_3_2_1_49_1","unstructured":"Joakim Lundin. 2024. node-red-contrib-deepstack. https:\/\/flows.nodered.org\/node\/node-red-contrib-deepstack. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_50_1","first-page":"4","article-title":"Protracer: Towards Practical Provenance Tracing by Alternating Between Logging and Tainting","volume":"2","author":"Ma Shiqing","year":"2016","unstructured":"Shiqing Ma, Xiangyu Zhang, Dongyan Xu, et al. 2016. Protracer: Towards Practical Provenance Tracing by Alternating Between Logging and Tainting.. In NDSS, Vol. 2. 4.","journal-title":"NDSS"},{"key":"e_1_3_2_1_51_1","volume-title":"2010 USENIX Annual Technical Conference (USENIX ATC 10)","author":"Migliavacca Matteo","year":"2010","unstructured":"Matteo Migliavacca, Ioannis Papagiannis, David M Eyers, Brian Shand, Jean Bacon, and Peter Pietzuch. 2010. {DEFCON}:{High-Performance } Event Processing with Information Security. In 2010 USENIX Annual Technical Conference (USENIX ATC 10)."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970299"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2011.17"},{"key":"e_1_3_2_1_54_1","unstructured":"J Paul Morrison. 2010. Flow-Based Programming: A new approach to application development. CreateSpace."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292561"},{"key":"e_1_3_2_1_56_1","volume-title":"[n. d.]","author":"Myers Andrew C.","year":"2024","unstructured":"Andrew C. Myers, N. Nystrom, L. Zheng, and Zdancewic S. [n. d.]. Jif: Java Information Flow. https:\/\/www.cs.cornell.edu\/jif. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_57_1","volume-title":"NDSS","volume":"5","author":"Newsome James","year":"2005","unstructured":"James Newsome and Dawn Xiaodong Song. 2005. Dynamic taint analysis for automatic detection, analysis, and signaturegeneration of exploits on commodity software.. In NDSS, Vol. 5. Citeseer, 3\u20134."},{"key":"e_1_3_2_1_58_1","volume-title":"General data protection regulation (GDPR). Official Journal (L 119) of the European Union 59 (4","author":"European Union Publications Office","year":"2016","unstructured":"Publications Office of the European Union. 2016. General data protection regulation (GDPR). Official Journal (L 119) of the European Union 59 (4 May 2016), 1\u201388. http:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290388"},{"key":"e_1_3_2_1_60_1","volume-title":"Practical Whole-System Provenance Capture. In Symposium on Cloud Computing (SoCC'17)","author":"Pasquier Thomas","year":"2017","unstructured":"Thomas Pasquier, Xueyuan Han, Mark Goldstein, Thomas Moyer, David Eyers, Margo Seltzer, and Jean Bacon. 2017. Practical Whole-System Provenance Capture. In Symposium on Cloud Computing (SoCC'17). ACM."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129249"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243776"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2577080.2577090"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3399669"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420989"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542484"},{"key":"e_1_3_2_1_67_1","volume-title":"Understanding the path to smart home adoption: Segmenting and describing consumers across the innovation-decision process. Energy research & social science 46","author":"Sanguinetti Angela","year":"2018","unstructured":"Angela Sanguinetti, Beth Karlin, and Rebecca Ford. 2018. Understanding the path to smart home adoption: Segmenting and describing consumers across the innovation-decision process. Energy research & social science 46 (2018), 274\u2013283."},{"key":"e_1_3_2_1_68_1","unstructured":"Vincent Simonet. 2003. The Flow Caml System: documentation and user's manual. Ph.D. Dissertation. INRIA."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2015.69"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2017.8116438"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380390"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-16462-5_12"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2034675.2034688"},{"key":"e_1_3_2_1_74_1","unstructured":"Council to Secure the Digital Economy. 2019. The C2 Consensus on IoT Device Security Baseline Capabilities. https:\/\/csde.org\/wp-content\/uploads\/2019\/09\/CSDE_IoT-C2-Consensus-Report_FINAL.pdf. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/1543135.1542486"},{"key":"e_1_3_2_1_76_1","unstructured":"Csongor Varga. 2024. NVR: capture store email pictures\/videos from IP camera streams. https:\/\/flows.nodered.org\/flow\/0da4d606575df13700461400178aca4e. [Accessed 24-06-2024]."},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00086"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23282"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629604"},{"key":"e_1_3_2_1_80_1","volume-title":"Nonintrusive appliance load monitoring: Review and outlook","author":"Zeifman Michael","year":"2011","unstructured":"Michael Zeifman and Kurt Roth. 2011. Nonintrusive appliance load monitoring: Review and outlook. IEEE transactions on Consumer Electronics 57, 1 (2011), 76\u201384."},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/2018396.2018419"},{"key":"e_1_3_2_1_82_1","first-page":"293","article-title":"Securing Distributed Systems with Information Flow Control","volume":"8","author":"Zeldovich Nickolai","year":"2008","unstructured":"Nickolai Zeldovich, Silas Boyd-Wickizer, and David Mazieres. 2008. Securing Distributed Systems with Information Flow Control.. In NSDI, Vol. 8. 293\u2013308.","journal-title":"NSDI"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/2775054.2694372"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3458305.3463377"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741134"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.5555\/2701746.2701799"}],"event":{"name":"EUROSYS '26: 21st European Conference on Computer Systems","location":"McEwan Hall\/The University of Edinburgh Edinburgh Scotland UK","acronym":"EUROSYS '26","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 21st European Conference on Computer Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3767295.3769352","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T12:23:23Z","timestamp":1780662203000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3767295.3769352"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,26]]},"references-count":86,"alternative-id":["10.1145\/3767295.3769352","10.1145\/3767295"],"URL":"https:\/\/doi.org\/10.1145\/3767295.3769352","relation":{},"subject":[],"published":{"date-parts":[[2026,4,26]]},"assertion":[{"value":"2026-04-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}