{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T04:59:12Z","timestamp":1783400352630,"version":"3.54.6"},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T00:00:00Z","timestamp":1745539200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T00:00:00Z","timestamp":1745539200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"DOI":"10.1186\/s13635-025-00199-2","type":"journal-article","created":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T16:12:57Z","timestamp":1745597577000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Jointly Achieving Smart Homes Security and Privacy through Bidirectional Trust"],"prefix":"10.1186","volume":"2025","author":[{"given":"Osman","family":"Abul","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Melike Burakgazi","family":"Bilgen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,4,25]]},"reference":[{"issue":"3","key":"199_CR1","doi-asserted-by":"publisher","first-page":"197","DOI":"10.1515\/icom-2019-0015","volume":"18","author":"V Zimmermann","year":"2020","unstructured":"V. Zimmermann, P. Gerber, K. Marky, L. B\u00f6ck, F. Kirchbuchner, Assessing users\u2019 privacy and security concerns of smart home technologies. I-Com 18(3), 197\u2013216 (2020). https:\/\/doi.org\/10.1515\/icom-2019-0015","journal-title":"I-Com"},{"key":"199_CR2","unstructured":"Federal Trade Commission (Press Release May 31 2023), FTC and DOJ Charge Amazon with Violating Children\u2019s Privacy Law by Keeping Kids\u2019 Alexa Voice Recordi, 2023. https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2023\/05\/ftc-doj-charge-amazon-violating-childrens-privacy-law-keeping-kids-alexa-voice-recordings-forever"},{"key":"199_CR3","doi-asserted-by":"publisher","unstructured":"J.M. Haney, S.M. Furman, Y. Acar, Smart home security and privacy mitigations: Consumer perceptions, practices, and challenges. Lect. Notes Comput. Sci. (Incl. Subseries Lect. Notes Artif. Intell. Lect. Notes Bioinforma.) 12210 LNCS, 393\u2013411 (2020). https:\/\/doi.org\/10.1007\/978-3-030-50309-3_26","DOI":"10.1007\/978-3-030-50309-3_26"},{"key":"199_CR4","unstructured":"Y. Zhao, Y. Yao, J. Fu, N. Zhou, in 32nd USENIX Security Symposium, USENIX Security 2023. \u201cIf sighted people know, I should be able to know:\u201d Privacy Perceptions of Bystanders with Visual Impairments around Camera-based Technology, vol. 7 (2023), pp. 4661\u20134678, usenix.org"},{"key":"199_CR5","doi-asserted-by":"publisher","unstructured":"M. Burakgazi\u00a0Bilgen, O. Abul, K. Bicakci, Authentication-enabled attribute-based access control for smart homes. Int. J. Inf. Secur. 22(2), 479\u2013495 (2023). https:\/\/doi.org\/10.1007\/s10207-022-00639-x","DOI":"10.1007\/s10207-022-00639-x"},{"key":"199_CR6","doi-asserted-by":"publisher","unstructured":"P. Emami-Naeini, H. Dixon, Y. Agarwal, L.F. Cranor, in Conference on Human Factors in Computing Systems - Proceedings. Exploring how privacy and security factor into IoT device purchase behavior (2019), pp. 1\u201312. https:\/\/doi.org\/10.1145\/3290605.3300764","DOI":"10.1145\/3290605.3300764"},{"key":"199_CR7","doi-asserted-by":"crossref","unstructured":"G. Chalhoub, I. Flechais, N. Nthala, R. Abu-Salma, in Proceedings of the 16th Symposium on Usable Privacy and Security, SOUPS 2020. Innovation inaction or in action? The role of user experience in the security and privacy design of smart home cameras (2020), pp. 185\u2013204, usenix.org","DOI":"10.1145\/3334480.3382850"},{"key":"199_CR8","doi-asserted-by":"publisher","unstructured":"J. Li, B. Zong, T. Cheng, Y. Li, E.D. Mynatt, A. Dhekne, Privacy vs. Awareness: Relieving the Tension between Older Adults and Adult Children When Sharing In-home Activity Data. Proc. ACM Hum.-Comput. Interact. 7(CSCW2), (2023). https:\/\/doi.org\/10.1145\/3610202","DOI":"10.1145\/3610202"},{"key":"199_CR9","unstructured":"S. Vetrivel, V. van Harten, C.H. Ga\u00f1\u00e1n, M. van Eeten, S. Parkin, in 32nd USENIX Security Symposium, USENIX Security 2023. Examining Consumer Reviews to Understand Security and Privacy Issues in the Market of Smart Home Devices vol. 3 (2023), pp. 1523\u20131540, usenix.org"},{"key":"199_CR10","doi-asserted-by":"publisher","unstructured":"P.G. Kelley, L.F. Cranor, N. Sadeh, in Conference on Human Factors in Computing Systems - Proceedings. Privacy as part of the app decision-making process (2013), pp. 3393\u20133402. https:\/\/doi.org\/10.1145\/2470654.2466466","DOI":"10.1145\/2470654.2466466"},{"key":"199_CR11","unstructured":"N. Malkin, D. Wagner, S. Egelman, in Proceedings of the 18th Symposium on Usable Privacy and Security, SOUPS 2022. Runtime Permissions for Privacy in Proactive Intelligent Assistants (2022), pp. 633\u2013651, usenix.org"},{"issue":"1","key":"199_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3241378","volume":"10","author":"Y He","year":"2020","unstructured":"Y. He, P. Bahirat, B.P. Knijnenburg, A. Menon, A Data-Driven Approach to Designing for Privacy in Household IoT. ACM Trans. Interact. Intell. Syst. 10(1), 1\u201347 (2020). https:\/\/doi.org\/10.1145\/3241378","journal-title":"ACM Trans. Interact. Intell. Syst."},{"key":"199_CR13","doi-asserted-by":"publisher","unstructured":"H. Lee, A. Kobsa, in 2016 IEEE 3rd World Forum on Internet of Things, WF-IoT 2016. Understanding user privacy in Internet of Things environments (2016), pp. 407\u2013412. https:\/\/doi.org\/10.1109\/WF-IoT.2016.7845392","DOI":"10.1109\/WF-IoT.2016.7845392"},{"key":"199_CR14","unstructured":"Regulation Protection, Regulation (EU) 2016\/679 of the European Parliament and of the Council. Regulation (eu),\u00a0, 2016, 679: 2016"},{"key":"199_CR15","doi-asserted-by":"publisher","unstructured":"O. Alrawi, A. Faulkenberry, F. Monrose, YourThings: A Comprehensive Annotated Dataset of Network Traffic from Deployed Home-based IoT Devices, vol. 1 (Association for Computing Machinery, 2022), pp. 10\u201313. https:\/\/doi.org\/10.1145\/nnnnnnn.","DOI":"10.1145\/nnnnnnn."},{"key":"199_CR16","doi-asserted-by":"publisher","unstructured":"P. Sun, S. Shen, Y. Wan, Z. Wu, Z. Fang, X. Zhi Gao, A Survey of IoT Privacy Security: Architecture, Technology, Challenges, and Trends. IEEE Internet Things J. PP(X), 1 (2024). https:\/\/doi.org\/10.1109\/JIOT.2024.3372518","DOI":"10.1109\/JIOT.2024.3372518"},{"key":"199_CR17","doi-asserted-by":"publisher","unstructured":"I. Yassine, T. Halabi, M. Bellaiche, in Proceedings - 2021 21st International Conference on Software Quality, Reliability and Security Companion, QRS-C 2021. Security Risk Assessment Methodologies in The Internet of Things: Survey and Taxonomy (2021), pp. 668\u2013675. https:\/\/doi.org\/10.1109\/QRS-C55045.2021.00101","DOI":"10.1109\/QRS-C55045.2021.00101"},{"key":"199_CR18","doi-asserted-by":"publisher","unstructured":"J.T. Force, Risk Management Framework (2017), pp. 229\u2013270. https:\/\/doi.org\/10.4018\/978-1-5225-2503-5.ch007","DOI":"10.4018\/978-1-5225-2503-5.ch007"},{"key":"199_CR19","doi-asserted-by":"publisher","unstructured":"D. Singh, I. Psychoula, J. Kropf, S. Hanke, A. Holzinger, Users\u2019 perceptions and attitudes towards smart home technologies. Lect. Notes Comput. Sci. (Incl. Subseries Lect. Notes Artif. Intell. Lect. Notes Bioinforma.) 10898 LNCS(June), 203\u2013214 (2018). https:\/\/doi.org\/10.1007\/978-3-319-94523-1_18","DOI":"10.1007\/978-3-319-94523-1_18"},{"key":"199_CR20","unstructured":"E. Zeng, S. Mare, F. Roesner, S. Clara, E. Zeng, S. Mare, F. Roesner, in Thirteenth Symposium on Usable Privacy and Security (SOUPS). End User Security and Privacy Concerns with Smart Homes T (Soups, 2017), pp. 65\u201380, usenix.org"},{"key":"199_CR21","unstructured":"P.E. Naeini, S. Bhagavatula, H. Habib, M. Degeling, L. Bauer, L. Cranor, N. Sadeh, S. Clara, P. Emami-naeini, S. Bhagavatula, H. Habib, M. Degeling, L. Bauer, L.F. Cranor, N. Sadeh, Privacy Expectations and Preferences in an IoT World, Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017), usenix.org"},{"key":"199_CR22","unstructured":"J. Bernd, R. Abu-Salma, A. Frik, in FOCI 2020 - 10th USENIX Workshop on Free and Open Communications on the Internet, co-located with USENIX Security 2020. Bystanders\u2019 privacy: The perspectives of nannies on smart home surveillance (2020), usenix.org"},{"key":"199_CR23","doi-asserted-by":"publisher","unstructured":"S. Chang, K. Nam, Smart home adoption: The impact of user characteristics and differences in perception of benefits. Buildings 11(9) (2021). https:\/\/doi.org\/10.3390\/buildings11090393","DOI":"10.3390\/buildings11090393"},{"key":"199_CR24","doi-asserted-by":"publisher","unstructured":"F. Kirchbuchner, T. Grosse-Puppendahl, M.R. Hastall, M. Distler, A. Kuijper, Ambient intelligence from senior citizens\u2019 perspectives: Understanding privacy concerns, technology acceptance, and expectations. Lect. Notes Comput. Sci. (Incl. Subseries Lect. Notes Artif. Intell. Lect. Notes Bioinforma.) 9425(November), 48\u201359 (2015). https:\/\/doi.org\/10.1007\/978-3-319-26005-1_4","DOI":"10.1007\/978-3-319-26005-1_4"},{"key":"199_CR25","unstructured":"K. Huan1, Y.T. Zhou, K. Zhang, J. Xu, J. Chen, D. Tang, K. Zhang, in 32nd USENIX Security Symposium, USENIX Security 2023. HOMESPY: The Invisible Sniffer of Infrared Remote Control of Smart TVsvol. 7 (2023), pp. 4553\u20134570, usenix.org"},{"issue":"2","key":"199_CR26","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1109\/TEM.2005.844927","volume":"52","author":"JB Earp","year":"2005","unstructured":"J.B. Earp, A.I. Ant\u00f3n, L. Aiman-Smith, W.H. Stufflebeam, Examining Internet privacy policies within the context of user privacy values. IEEE Trans. Eng. Manag. 52(2), 227\u2013237 (2005). https:\/\/doi.org\/10.1109\/TEM.2005.844927","journal-title":"IEEE Trans. Eng. Manag."},{"key":"199_CR27","unstructured":"S. Manandhar, K. Kafle, B. Andow, K. Singh, A. Nadkarni, in Proceedings of the 31st USENIX Security Symposium, Security 2022. Smart Home Privacy Policies Demystified: A Study of Availability, Content, and Coverage (2022), pp. 3521\u20133538, usenix.org"},{"key":"199_CR28","unstructured":"N.M. Barbosa, Z. Zhang, Y. Wang, in Proceedings of the 16th Symposium on Usable Privacy and Security, SOUPS 2020. Do privacy and security matter to everyone? Quantifying and clustering user-centric considerations about smart home device adoption (2020), pp. 417\u2013436, usenix.org"},{"key":"199_CR29","unstructured":"Kisisel Verileri Koruma Kurulu, KVKK, Resmi Gazete, 32 (2018). https:\/\/www.kvkk.gov.tr\/Icerik\/4233\/"},{"key":"199_CR30","unstructured":"A BROADBAND INTERNET TECHNICAL ADVISORY GROUP, Internet of Things (IoT) Security and Privacy Recommendations. Technical Report November (2016)"},{"key":"199_CR31","doi-asserted-by":"publisher","unstructured":"N. Apthorpe, Y. Shvartzshnaider, A. Mathur, D. Reisman, N. Feamster, Discovering Smart Home Internet of Things Privacy Norms Using Contextual Integrity. Proc. ACM Interact. Mob. Wearable Ubiquit. Technol. 2(2), 1\u201323 (2018). https:\/\/doi.org\/10.1145\/3214262","DOI":"10.1145\/3214262"},{"key":"199_CR32","doi-asserted-by":"publisher","unstructured":"A.K. Sikder, L. Babun, Z.B. Celik, H. Aksu, P. McDaniel, E. Kirda, A.S. Uluagac, Who\u2019s Controlling My Device? Multi-User Multi-Device-Aware Access Control System for Shared Smart Home Environment. ACM Trans. Internet Things 3(4), (2022). https:\/\/doi.org\/10.1145\/3543513","DOI":"10.1145\/3543513"},{"key":"199_CR33","doi-asserted-by":"publisher","unstructured":"M. Burakgazi Bilgen, K. Bicakci, in 2020 International Conference on Information Security and Cryptology, ISCTURKEY 2020 - Proceedings. Extending Attribute-Based Access Control Model with Authentication Information for Internet of Things (2020), pp. 48\u201355. https:\/\/doi.org\/10.1109\/ISCTURKEY51113.2020.9307964","DOI":"10.1109\/ISCTURKEY51113.2020.9307964"},{"key":"199_CR34","doi-asserted-by":"publisher","unstructured":"S. Bahizad, in Proceedings - 2020 7th IEEE International Conference on Cyber Security and Cloud Computing and 2020 6th IEEE International Conference on Edge Computing and Scalable Cloud, CSCloud-EdgeCom 2020. Risks of Increase in the IoT Devices (2020), pp. 178\u2013181. https:\/\/doi.org\/10.1109\/CSCloud-EdgeCom49738.2020.00038","DOI":"10.1109\/CSCloud-EdgeCom49738.2020.00038"},{"issue":"1","key":"199_CR35","doi-asserted-by":"publisher","first-page":"311","DOI":"10.5753\/jis.2024.3944","volume":"15","author":"TA Coleti","year":"2024","unstructured":"T.A. Coleti, R. Balancieri, A. Menolli, O.A. Mahmoud, V.H. Sotti, M. Yvano, M. Morandini, Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD. J. Interact. Syst. 15(1), 311\u2013322 (2024). https:\/\/doi.org\/10.5753\/jis.2024.3944","journal-title":"J. Interact. Syst."},{"key":"199_CR36","doi-asserted-by":"publisher","unstructured":"J. Bugeja, A. Jacobsson, P. Davidsson, PRASH: A framework for privacy risk analysis of smart homes. Sensors 21(19) (2021). https:\/\/doi.org\/10.3390\/s21196399","DOI":"10.3390\/s21196399"},{"issue":"CP740","key":"199_CR37","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1049\/cp.2018.0037","volume":"2018","author":"J Sturgess","year":"2018","unstructured":"J. Sturgess, J.R. Nurse, J. Zhao, A capability-oriented approach to assessing privacy risk in smart home ecosystems. IET Conf. Publ. 2018(CP740), 1\u20138 (2018). https:\/\/doi.org\/10.1049\/cp.2018.0037","journal-title":"IET Conf. Publ."},{"key":"199_CR38","unstructured":"J. Zang, K. Dummit, J. Graves, P. Lisker, L. Sweeney, Who knows what about me? A survey of behind the scenes personal data sharing to third parties by mobile apps. Technol. Sci. 2015103001, pp. 2\u20131 (2015)"},{"key":"199_CR39","doi-asserted-by":"publisher","unstructured":"P. Mell, K. Scarfone, S. Romanosky, Common vulnerability scoring system (2006). https:\/\/doi.org\/10.1109\/MSP.2006.145","DOI":"10.1109\/MSP.2006.145"},{"key":"199_CR40","unstructured":"J. Risto. What is CVSS - Common Vulnerability Scoring System (2023). Last access: Dec 12, 2024. https:\/\/www.sans.org\/blog\/what-is-cvss\/"},{"key":"199_CR41","unstructured":"A. Abraham. Mobile-Security-Framework-MobSF:README (2016), Last access: Dec 12, 2024. https:\/\/github.com\/MobSF\/Mobile-Security-Framework-MobSF\/blob\/master\/README.md"},{"key":"199_CR42","unstructured":"Q. Linkedin. linkedin\/qark: Tool to look for several security related Android application vulnerabilities (2019), Last access: Dec 12, 2024. https:\/\/github.com\/linkedin\/qark"}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-025-00199-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13635-025-00199-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-025-00199-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,25]],"date-time":"2025-04-25T16:13:03Z","timestamp":1745597583000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/s13635-025-00199-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,25]]},"references-count":42,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["199"],"URL":"https:\/\/doi.org\/10.1186\/s13635-025-00199-2","relation":{},"ISSN":["2510-523X"],"issn-type":[{"value":"2510-523X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,25]]},"assertion":[{"value":"7 December 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 March 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 April 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"This article does not contain any studies with human participants or animals.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"The authors declare no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"17"}}