Privacy Risk Assessment for SQLite Based Android Applications

Kuo-Hui Yeh ； Jia-Li Hou ； Lin-Chih Chen ； Hao-Xiang Liao ； Wei-Pang Yang

《網際網路技術學刊》 18卷7期 (2017/12) Pp. 1533-1541

https://doi.org/10.6138/JIT.2017.18.7.20151210

摘要

Managing privacy leakage is of great importance in the Android platform. The variety of new forms of user-privacy fraud reveals a new challenge in terms of predicting potential private data disclosure threats and protecting the privacy of the devices inside our pockets. In this paper, we present an analytical framework, called AppLeak, to effectively evaluate information loss and detect privacy leakage during the runtime of Android applications. Moreover, a rigorous privacy risk assessment procedure is presented in which the potential privacy risk threat associated with the running Android application can be identified. In AppLeak, we adopt new starting points such as individual perception and attack criteria as major analytical principles. With the testing scenarios, we demonstrate that the feasibility and practicability of AppLeak are guaranteed.

關鍵字

Android ； Privacy leakage ； Risk assessment ； Security ； SQLite