论文信息 - User-centric Monitoring of Sensitive Information Access in Android Applications

User-centric Monitoring of Sensitive Information Access in Android Applications

Mobile applications (apps) have access to a large volume of sensitive user information. Current mobile platforms such as Android do not provide a means for the user to quantitatively understand the nature of access to their sensitive data by apps. In this paper, we present our approach to profile app's access to user's data with the ultimate goal of developing a personal privacy threshold for users and privacy index for apps.

Roshanak Roshandel | Robert Tyler

[1] Rajesh Krishna Balan,et al. The case for mobile forensics of private data leaks: towards large-scale user-oriented privacy protection , 2013, APSys.

[2] Ashish Agrawal,et al. A multi-dimensional measure for intrusion: the intrusiveness quality attribute , 2013, QoSA '13.

[3] Julia Rubin,et al. A Bayesian Approach to Privacy Enforcement in Smartphones , 2014, USENIX Security Symposium.

[4] Patrick D. McDaniel,et al. Porscha: policy oriented secure content handling in Android , 2010, ACSAC '10.

[5] Sougata Mukherjea,et al. Securing Enterprise Data on Smartphones Using Run Time Information Flow Control , 2012, 2012 IEEE 13th International Conference on Mobile Data Management.

[6] Norman M. Sadeh,et al. Reconciling mobile app privacy and usability on smartphones: could user privacy profiles help? , 2014, WWW.

[7] Lorrie Faith Cranor,et al. Understanding and capturing people’s privacy policies in a mobile social networking application , 2009, Personal and Ubiquitous Computing.