Android permissions: User attention, comprehension, and behavior

SOUPS 2012 - Proceedings of the 8th Symposium on Usable Privacy and Security

Volumn , Issue , 2012, Pages

  Felt, Adrienne Porter ^a   Ha, Elizabeth ^a   Egelman, Serge ^a   Haney, Ariel ^a   Chin, Erika ^a   Wagner, David ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Android; Mobile phones; Smartphones; Usable security

Indexed keywords

ANDROID; INTERNET SURVEY; LABORATORY STUDIES; USABILITY STUDIES; USABLE SECURITY; USER ATTENTION;

INTERNET; MOBILE PHONES; ROBOTS; SMARTPHONES;

SURVEYS;

EID: 84865024594     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2335356.2335360     Document Type: Conference Paper

References (47)

1. AdMob Mobile Metrics Report. AdMob Blog, 2010.
2. How Consumers Interact with Mobile App Advertising. Harris Interactive Survey, December 2011.
3. M. Ackerman, L. Cranor, and J. Reagle. Privacy in e-commerce: examining user scenarios and privacy preferences. In Proceedings of the ACM Conference on Electronic Commerce, 1999.
4. A. Acquisti. Privacy in electronic commerce and the economics of immediate gratification. In Proceedings of the ACM Electronic Commerce Conference (ACM EC), 2004.
5. Android Open Source Project. Android Security Overview, 2012.
6. L. Barkhuus and A. Dey. Location-based services for mobile telephony: a study of users' privacy concerns. In Proceedings of the International Conference on Human-Computer Interaction, 2003.
7. J. R. Bettman. An Information Processing Theory of Consumer Choice. Addison-Wesley Publishing Company, 1979.
8. N. J. Blunch. Position Bias in Multiple-Choice Questions. Journal of Marketing Research, 1984.
9. T. Buchanan, C. Paine, A. N. Joinson, and U.-D. Reips. Development of measures of online privacy concern and protection for use on the Internet. Journal of the American Society for Information Science and Technology, 2007.
10. S. Consolvo, I. E. Smith, T. Matthews, A. LaMarca, J. Tabert, and P. Powledge. Location disclosure to social relations: why, when, & what people want to share. In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems, 2005.
11. L. F. Cranor. A Framework for Reasoning about the Human in the Loop. In Proceedings of the Conference on Usability, Psychology, and Security. USENIX Association, 2008.
12. S. Egelman, L. F. Cranor, and J. Hong. You've Been Warned: An empirical study of the effectiveness of web browser phishing warnings. In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems, 2008.
13. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. In Proceedings of the Symposium on Operating Systems Design and Implementation (OSDI), 2010.
14. W. Enck, D. Octeau, P. McDaniel, and S. Chaudhuri. A study of Android application security. In Proceedings of the USENIX Security Symposium, 2011.
15. W. Enck, M. Ongtang, and P. McDaniel. On lightweight mobile phone application certification. In Proceedings of the ACM Conference on Computer and Communication Security (CCS), 2009.
16. A. P. Felt, E. Chin, S. Hanna, D. Song, and D. Wagner. Android Permissions Demystified. In Proceedings of the ACM Conference on Computer and Communication Security (CCS), 2011.
17. A. P. Felt, M. Finifter, E. Chin, S. Hanna, and D. Wagner. A Survey of Mobile Malware in the Wild. In Proceedings of the ACM Workshop on Security and Privacy in Mobile Devices (SPSM), 2011.
18. A. P. Felt, K. Greenwood, and D. Wagner. The Effectiveness of Application Permissions. In Proceedings of the USENIX Conference on Web Application Development (WebApps), 2011.
19. A. Fuchs, A. Chaudhuri, and J. Foster. SCanDroid: Automated Security Certification of Android Applications. Technical report, University of Maryland, 2009.
20. G. J. Gaeth and J. Shanteau. Reducing the Influence of Irrelevant Information on Experienced Decision Makers. Organizational Behavior and Human Performance, 33, 1984.
21. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall. These Aren't the Droids You're Looking For: Retrofitting Android to Protect Data From Imperious Applications. In Proceedings of the ACM Conference on Computer and Communication Security, 2011.
22. J. Howell and S. Schechter. What you see is what they get. In Proceedings of the IEEE Workshop on Web 2.0 Security and Privacy (W2SP), 2010.
23. C. Jensen, C. Potts, and C. Jensen. Privacy practices of Internet users: Self-reports versus observed behavior. In International Journal of Human-Computer Studies, 2005.
24. P. Kelley, M. Benisch, L. Cranor, and N. Sadeh. When are users comfortable sharing locations with advertisers? In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems, 2011.
25. P. G. Kelley, S. Consolvo, L. F. Cranor, J. Jung, N. Sadeh, and D. Wetherall. A Conundrum of Permissions: Installng Applications on an Android Smartphone. In Proceedings of the Workshop on Usable Security (USEC), 2012.
26. J. King, A. Lampinen, and A. Smolen. Privacy: Is There An App for That? In Proceedings of the Symposium on Usable Privacy and Security (SOUPS), 2011.
27. P. Kumaraguru and L. F. Cranor. Privacy Indexes: A Survey of Westin's Studies. Technical report, Carnegie Mellon University CMU-ISRI-5-138, 2015.
28. R. Leung, L. Findlater, J. McGrenere, P. Graf, and J. Yang. Multi-Layered Interfaces to Improve Older Adults' Initial Learnability of Mobile Applications. ACM Transactions on Accessible Computing (TACCESS), 2010.
29. J. Lindqvist, J. Cranshaw, J. Wiese, J. Hong, and J. Zimmerman. I'm the mayor of my house: examining why people use Foursquare - a social-driven location sharing application. In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems, 2011.
30. W. A. Magat, W. K. Viscusi, and J. Huber. Consumer Processing of Hazard Warning Information. Journal of Risk and Uncertainty, 1, 1988.
31. S. Motiee, K. Hawkey, and K. Beznosov. Do windows users follow the principle of least privilege?: investigating user account control practices. In Proceedings of the Symposium on Usable Privacy and Security (SOUPS), 2010.
32. K. Mueller and K. Butler. Flex-P: Flexible Android Permissions. IEEE Symposium on Security and Privacy, Poster Session, 2011.
33. M. Nauman, S. Khan, M. Alam, and X. Zhang. Apex: Extending Android Permission Model and Enforcement with User-defined Runtime Constraints. In ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2010.
34. P. Nickinson. Android Market now has more than a quarter-million applications, 2011.
35. F. Roesner, T. Kohno, A. Moshchuk, B. Parno, H. Wang, and C. Cowan. User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems. In Proceedings of the IEEE Conference on Security and Privacy, 2012.
36. N. Sadeh, J. Hong, L. Cranor, I. Fette, P. Kelley, M. Prabaker, and J. Rao. Understanding and capturing people's privacy policies in a mobile social networking application. Personal and Ubiquitous Computing, 2009.
37. S. E. Schechter, R. Dhamija, A. Ozment, and I. Fischer. The Emperor's New Security Indicators. In Proceedings of the IEEE Symposium on Security and Privacy, 2007.
38. S. Sen and D. Lerman. Why are you telling me this? An examination into negative consumer reviews on the web. Journal of Interactive Marketing, 21, 2007.
39. B. Shneiderman. Promoting universal usability with multi-layer interface design. In Proceedings of the Conference on Universal Usability (CUU), 2003.
40. J. Sunshine, S. Egelman, H. Almuhimedi, N. Atri, and L. F. Cranor. Crying Wolf: An Empirical Study of SSL Warning Effectiveness. In Proceedings of the USENIX Security Symposium, 2009.
41. J. Sunshine, S. Egelman, H. Almuhimedi, N. Atri, and L. F. Cranor. Crying Wolf: An Empirical Study of SSL Warning Effectiveness. In Proceedings of the USENIX Security Symposium, 2009.
42. H. Taylor. Most People are "Privacy Pragmatists" Who, While Concerned about Privacy, Will Sometimes Trade It Off for Other Benefits. Harris Interactive, March 2003.
43. S. Thurm and Y. I. Kane. Your apps are watching you, 2010.
44. M. S. Wogalter. Communication-Human Information Processing (C-HIP) Model. In Handbook of Warnings. Lawrence Erlbaum Associates, 2006.
45. M. S. Wogalter. Purpose and scope of warnings. In Handbook of Warnings. Lawrence Erlbaum Associates, 2006.
46. Y. Zhou, Z. Wang, W. Zhou, and X. Jiang. Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets. In Proceedings of the Network and Distributed System Security Symposium (NDSS), 2012.
47. F. Zhu and X. Zhang. Impact of Online Consumer Reviews on Sales: The Moderating Role of Product and Consumer Characteristics. Journal of Marketing, 74, 2010.