[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-122747-en":3,"doc-seo-122747-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":4,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},122747,8796095360427,"Lucas Martin","https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d",8,"Research & Report","Detecting Privacy Threats with Machine Learning - A Design Framework for Identifying Side-Channel Risks of Illegitimate User Profiling","Privacy leakage is becoming increasingly severe as IoT, AI, and blockchain deployments expand and generate data-intensive interactions. Such systems can be exploited through side-channel attacks, where adversaries extract sensitive information from devices without directly manipulating the target. The study applies a design science approach to establish a foundation for systematically assessing privacy risks from side-channels. It identifies privacy threats, proposes a machine-learning-driven design framework for detecting side-channel risks, and supports privacy analytics research using keystroke-timing text classification as a use case.","Association for Information Systems  \nAIS Electronic Library (AISeL)  \n\n| AMCIS 2023 Proceedings | Information Security and Privacy (SIG SEC) |\n| --- | --- |\n| Aug 10th, 12:00 AM\u003Cbr>Detecting Privacy Threats with Machine Learning: A Design Framework for Identifying Side-Channel Risks of Illegitimate User Profiling\u003Cbr>Raja Hasnain Anwar\u003Cbr>University of Arizona, [rajahasnainanwar@arizona.edu](rajahasnainanwar@arizona.edu)\u003Cbr>Yi (Zoe) Zou\u003Cbr>University of Western Ontario, [yzou@ivey.ca](yzou@ivey.ca)\u003Cbr>Muhammad Taqi Raza\u003Cbr>University of Arizona, [taqi@arizona.edu](taqi@arizona.edu)\u003Cbr>Follow this and additional works at: [https://aisel.aisnet.org/amcis2023](https://aisel.aisnet.org/amcis2023) |  |\n\nRecommended Citation  \nAnwar, Raja Hasnain; Zou, Yi (Zoe); and Raza, Muhammad Taqi, \"Detecting Privacy Threats with Machine Learning: A Design Framework for Identifying Side-Channel Risks of Illegitimate User Profiling\" (2023) . AMCIS 2023 Proceedings. 7.  \n[https://aisel.aisnet.org/amcis2023/sig_sec/sig_sec/7](https://aisel.aisnet.org/amcis2023/sig_sec/sig_sec/7)  \nThis material is brought to you by the Americas Conference on Information Systems (AMCIS) at AIS Electronic Library (AISeL) . It has been accepted for inclusion in AMCIS 2023 Proceedings by an authorized administrator of AIS Electronic Library (AISeL) . For more information, please [contact elibrary@aisnet.org](contact elibrary@aisnet.org).  \nDetecting Privacy Threats with Machine Learning: A Design Framework for Identifying Side-Channel Risks of Illegitimate User Profiling  \nEmergent Research Forum (ERF) Paper  \nRaja Hasnain Anwar  \nUniversity of Arizona [rajahasnainanwar@arizona.edu](rajahasnainanwar@arizona.edu)  \nYi (Zoe) Zou  \nUniversity of Western Ontario [yzou@ivey.ca](yzou@ivey.ca)  \nMuhammad Taqi Raza  \nUniversity of Arizona  \n[taqi@arizona.edu](taqi@arizona.edu)  \nAbstract  \nPrivacy leakage has become prevalent and severe with the increasing adoption of the internet of things (IoT), artificial intelligence (AI), and blockchain technologies. Such data-intensive systems are vulnerable to side-channel attacks in which hackers can extract sensitive information from a digital device without actively manipulating the target system. Nevertheless, there is a scarcity of IS research on how businesses can effectively detect and safeguard against side-channel attacks. This study adopts the design science paradigm and lays the groundwork for systematic inquiry into the assessment of privacy risks related to side-channels. In this paper, we a) highlight the privacy threats posed by side-channel attacks, b) propose a machine learning-driven design framework to identify side-channel privacy risks, and c) contribute to the literature on privacy analytics using machine learning techniques. We demonstrate a use case of the proposed framework with a text classification model that uses keystroke timings as side-channel.  \nKeywords  \nDesign science, privacy analytics, side-channel attacks, machine learning.  \nIntroduction  \nWith the ubiquitous use of AI-related computers, smart devices, and sensors, there are increasing concerns among IS professionals and scholars about issues surrounding cybersecurity and data privacy (Rai, 2017). Side-channel attacks have emerged as an increasing threat faced by both business owners and individual consumers. Distinct from other forms of cybersecurity threats where the integrity of an information system is directly compromised through unauthorized system access or malicious system tampering, side-channel attacks are non-invasive and passive. Standaert (2010) defines side-channel attacks as a way for adversaries to learn the physical specifications of the system and the characteristics of its users through externally observable phenomena such as timing information and power consumption. Therefore, side-channel adversaries try to identify unintended information leakage from the activities of connected IS devices. For example, the ZombieLoad attack d","cbCaiaX0VZDLqvAr","https://ap.wps.com/l/cbCaiaX0VZDLqvAr","pdf",247075,1,6,"English","en",105,"# Abstract\n# Introduction\n## Side-channel attacks and privacy leakage\n## Research goal and design science approach","[{\"question\":\"What privacy risks do the paper focus on?\",\"answer\":\"The paper focuses on privacy leakage caused by side-channel attacks, where attackers can extract sensitive information without directly manipulating the target system.\"},{\"question\":\"How does the proposed framework detect side-channel risks?\",\"answer\":\"It uses a machine learning-driven design framework to identify side-channel privacy risks by guiding data gathering, preprocessing, modeling, and evaluation.\"},{\"question\":\"What side-channel signal is used in the demonstrated use case?\",\"answer\":\"The use case applies the framework to user profiling using keystroke timings as the side-channel signal for a text classification model.\"}]","Detecting Privacy Threats with Machine Learning - A Design Framework for Identifying Side-Channel Risks of Illegitimate User Profiling | PDF",1785812671,15,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"detecting-privacy-threats-with-machine-learning-a-design-framework-for-identifying-side-channel-risks-of-illegitimate-user-profiling","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/detecting-privacy-threats-with-machine-learning-a-design-framework-for-identifying-side-channel-risks-of-illegitimate-user-profiling/122747/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-04",true,{"@type":65,"interactionType":66,"userInteractionCount":4},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What privacy risks do the paper focus on?","Question",{"text":75,"@type":76},"The paper focuses on privacy leakage caused by side-channel attacks, where attackers can extract sensitive information without directly manipulating the target system.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"How does the proposed framework detect side-channel risks?",{"text":80,"@type":76},"It uses a machine learning-driven design framework to identify side-channel privacy risks by guiding data gathering, preprocessing, modeling, and evaluation.",{"name":82,"@type":73,"acceptedAnswer":83},"What side-channel signal is used in the demonstrated use case?",{"text":84,"@type":76},"The use case applies the framework to user profiling using keystroke timings as the side-channel signal for a text classification model.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,114,119,122,127,130,134],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":21,"doc_module":4,"doc_module_name":46,"category_name":111,"show_sort_weight":112,"slug":113},"Technology",50,"technology",{"id":115,"doc_module":4,"doc_module_name":46,"category_name":116,"show_sort_weight":117,"slug":118},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":120,"slug":121},30,"research-report",{"id":123,"doc_module":4,"doc_module_name":46,"category_name":124,"show_sort_weight":125,"slug":126},9,"Religion & Spirituality",20,"religion-spirituality",{"id":125,"doc_module":4,"doc_module_name":46,"category_name":128,"show_sort_weight":125,"slug":129},"World Cup","world-cup",{"id":131,"doc_module":4,"doc_module_name":46,"category_name":132,"show_sort_weight":131,"slug":133},10,"Lifestyle","lifestyle",{"id":135,"doc_module":4,"doc_module_name":46,"category_name":136,"show_sort_weight":106,"slug":137},19,"General","general"]