Lavanya Elluri
Texas A&M University-Central Texas, TX·Computer Science
Smart devices on the Internet of Things (IoT), such as connected cameras, thermostats and health monitors, collect large amounts of sensitive data. To protect that data, manufacturers must follow many cybersecurity laws, data protection regulations and standards.
- Fields
Computer Science
Engineering
- Topics
cybersecurity
Internet of Things
IoT
- Grants
- 1 known grant, through Jun 2027
What they work on
- Develop a technique to automatically extract rules from U.S. IoT cybersecurity laws, data protection regulations and NIST standards, and store them in semantically rich ontologies built with Semantic Web technologies.
- Map extracted regulatory rules to statements in company privacy policies, so the system can cross-check which applicable rules a policy covers and which it omits.
- Publish knowledge graphs that organizations can query with SPARQL, a linked-data query language, to identify missing IoT compliance rules and correct their policy documents without manual review.
More about the research
These documents are long and full of complex rules, and companies often struggle to work out which rules apply and whether their privacy policies cover them. This project aims to automate that checking for United States IoT laws, data protection regulations and National Institute of Standards and Technology (NIST) standards.
Why it matters
IoT vendors face a growing set of cybersecurity and privacy rules that are hard to interpret. Automated, queryable knowledge graphs could help companies find missing rules and correct their privacy policies quickly. Consumers could also check a vendor's compliance without reading legal documents, which may improve protection of personal data passing through smart devices.
Known grants
From NIH and NSF research grants. Labs often have other funding we can't see.
Closest labs
Indrakshi Ray
Colorado State University-Fort Collins, CO·Computer Science
Develop natural language processing models for cross-genre entailment that connect the meaning of privacy laws to technical software specifications, in order to identify privacy vulnerabilities in health data handling.
David Choffnes
Northeastern University, MA·Computer Science
Design a system that lets network operators state routing goals, or intents, such as better performance or avoiding certain countries, and automatically configures routing announcements to control how traffic enters their network.
David Kotz
Dartmouth College, NH·Computer Science
Develop methods that let smart-home occupants discover, identify and locate Internet of Things (IoT) devices, including non-cooperative ones, and reveal the information flows those devices produce.
The school
Texas A&M University-Central Texas: 1 labs on PI Pages.
Reach out
A start for your email. Fill in the brackets.