Testing for smart homes that are secure, private and sustainable.

ASSISTANTS (Assessing Software Security, prIvacy, and SusTAiNability through Testing techniqueS) measured the software that runs smart-home devices, let people state privacy preferences in plain language, turned them into policies the devices actually obey, and tested the whole chain on a real home-automation platform.

Concluded on 28 February 2026

Duration
27 monthsDec 2023 – Feb 2026
Work packages
4 of 4 closed
Deliverables
9 of 9 delivered
Milestones
3 of 3 reached

From code to a device that says no

The project is one chain. Each link was built in a work package, and the pilot proved the links hold together.

  1. Sustainability and security metrics
  2. Code analysis tools
  3. Labels and certification manifest
  4. User preference in plain language
  5. Translation to XACML policy
  6. Decision and enforcement
  7. Integration in the home platform
  8. End-to-end tests

27 months, plan against outcome

Dashed bars are the original 24-month plan; solid bars are what happened. WP1 and WP2 ran exactly on schedule. A three-month delay in contracting the home-automation integrator moved the pilot, and an approved extension to M27 absorbed it.

  • Planned
  • Actual
  • Deliverable
  • Milestone
  • Originally planned date
  • Extension M25–M27
WP1Security and sustainability labels
T1.1Sustainability metrics
D1.1
T1.1 Sustainability metrics: Planned M1–M4, actual M1–M4; D1.1 delivered M4.
T1.2Policy-based security evaluation
D1.2
T1.2 Policy-based security evaluation: Planned M3–M8, actual M3–M8; D1.2 delivered M8.
T1.3Security and sustainability evaluation
D1.3
T1.3 Security and sustainability evaluation: Planned M5–M12, actual M5–M12; D1.3 delivered M12.
WP2Smart Home Dashboard
T2.1Smart Home Dashboard design
D2.1
T2.1 Smart Home Dashboard design: Planned M5–M10, actual M5–M10; D2.1 delivered M10.
T2.2Dynamic data usage control
D2.2
T2.2 Dynamic data usage control: Planned M7–M16, actual M7–M16; D2.2 delivered M16.
T2.3Data Privacy Dashboard
D2.3
T2.3 Data Privacy Dashboard: Planned M9–M16, actual M9–M16; D2.3 delivered M16.
WP3Pilot
T3.1Pilot requirements
D3.1
T3.1 Pilot requirements: Planned M13–M16, actual M13–M18; D3.1 delivered M18.
T3.2Pilot design and integration
D3.2
D3.2
T3.2 Pilot design and integration: Planned M15–M18, actual M18–M22; D3.2 planned M24, delivered M22.
T3.3End-to-end evaluation
D3.3
D3.3
T3.3 End-to-end evaluation: Planned M17–M24, actual M20–M27; D3.3 planned M24, delivered M27.
WP4Management, dissemination and exploitation
T4.1Website and social media
T4.1 Website and social media: Planned M1–M24, actual M1–M27.
T4.2Scientific dissemination
T4.2 Scientific dissemination: Planned M5–M24, actual M5–M27.
T4.3Open-source and industry outreach
absorbed into T4.1 and T4.2
T4.3 Open-source and industry outreach: Planned M9–M24, not tracked separately; activities carried out in T4.1 and T4.2.
Milestones
MS1
MS2
MS2
MS3
MS3
MS1 Metrics defined, tool released: planned M12, reached M12; MS2 Data Privacy Dashboard released: planned M15, reached M16; MS3 Pilot deployed: planned M24, reached M27.

On time

T1.1 to T2.3 closed in the month planned. MS1 came at M12, and MS2, the Data Privacy Dashboard, at M16 together with D2.3.

Shifted

T3.1 took two extra months, T3.2 started at M18, T3.3 moved to M20–M27. D3.2 was still ready at M22, ahead of its M24 date.

Unchanged

No change to objectives, scientific scope or budget, and no deliverable or milestone dropped.

What each work package delivered

Measure and certify

WP1, M1–M12

Environmental, economic and social metrics; a formal link between Security-by-Contract and XACML; an analysis toolchain validated on the Rust firmware of an indoor camera.

WP1 in detail

Configure and enforce

WP2, M5–M16

The Smart Home Dashboard design, usage control with revocable data envelopes, and the Data Privacy Dashboard that turns plain-language rules into XACML.

WP2 in detail

Integrate and test

WP3, M13–M27

Integration in the Smartotum platform, a Rust smart light, a privacy manager on the gateway, and acceptance tests on camera, light and policies.

WP3 in detail

Share and reuse

WP4, M1–M27

Papers at ARES, SAC and FGCS, the BASS 2024 keynote, workshops, open repositories and this website.

Publications

Latest news

  1. M27

    Project closed

    ASSISTANTS concludes

    ASSISTANTS concluded on February 28, 2026, at the end of a three-month extension. All four work packages are closed, the nine deliverables from D1.1 to D3.3 have been delivered and the three milestones have been reached.

  2. M27

    Task completed

    Successful Completion of T4.2

    Task T4.2, Dissemination Toward the Scientific Community, was completed on February 28, 2026, together with the project.

  3. M27

    Task completed

    Successful Completion of T4.1

    Task T4.1, Website and Social Media Profiles Management, was completed on February 28, 2026.

  4. M27

    Task completed

    Successful Completion of T3.3

    Task T3.3 was completed on February 28, 2026, with the delivery of D3.3, Pilot Evaluation, and the achievement of Milestone 3. The acceptance tests were run on the pilot integrated in the Smartotum home-automation platform, checking sustainability, policy compliance and security.

All 14 news items, from the kick-off to the closing