Leakage Detection and Risk Assessment on Privacy for Android Applications: LRPAndroid
How to identify and manage information leakage of
user privacy is a very crucial and sensitive topic for handheld mobile device
manufacturers, telecommunication companies, and mobile device users. As the
success of a financial fraud usually requires possessing a victim’s private
information, new types of personal identity theft and private information
acquirement attack are developed and deployed along with various Apps in order
to steal personal private information from mobile device users. With more than
50% of smartphone market share, Android-based mobile phone vendors and Internet
service providers have to face the new challenge on user privacy management.
In
this paper, we present a user privacy analysis framework for an Android
platform called LRPdroid. The goals of LRPdroid are to achieve information
leakage detection, user privacy disclosure evaluation, and privacy risk
assessment for Apps installed on Android-based mobile devices. With a formally
defined user privacy model, LRPdroid can effectively support mobile users to
manage their own privacy risks on targeted Apps. In addition, new privacy
analysis viewpoints such as user perception and leakage awareness are
introduced in LRPdroid. Two general App usage scenarios are evaluated with our
system prototype to show the feasibility and practicability of the LRPdroid
framework on user privacy management.
Comments
Post a Comment