Privacy Risk Assessment for SQLite Based Android Applications

10.6138/JIT.2017.18.7.20151210

Kuo-Hui Yeh；Jia-Li Hou；Lin-Chih Chen；Hao-Xiang Liao；Wei-Pang Yang

Android ； Privacy leakage ； Risk assessment ； Security ； SQLite

網際網路技術學刊

18卷7期（2017 / 12 / 01）

1533 - 1541

英文

Managing privacy leakage is of great importance in the Android platform. The variety of new forms of user-privacy fraud reveals a new challenge in terms of predicting potential private data disclosure threats and protecting the privacy of the devices inside our pockets. In this paper, we present an analytical framework, called AppLeak, to effectively evaluate information loss and detect privacy leakage during the runtime of Android applications. Moreover, a rigorous privacy risk assessment procedure is presented in which the potential privacy risk threat associated with the running Android application can be identified. In AppLeak, we adopt new starting points such as individual perception and attack criteria as major analytical principles. With the testing scenarios, we demonstrate that the feasibility and practicability of AppLeak are guaranteed.