Studying the effectiveness of android application permissions requests

2013 IEEE International Conference on Pervasive Computing and Communications Workshops, PerCom Workshops 2013

Volumn , Issue , 2013, Pages 291-296

  Benton, Kevin ^a   Camp, L Jean ^a   Garg, Vaibhav ^a  

^a INDIANA UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AMAZON'S MECHANICAL TURKS; ANDROID APPLICATIONS; ANDROID PLATFORMS; MODEL APPLICATION; POPULAR PLATFORM; USER INFORMATION; USER STUDY; VISUAL INDICATORS;

COMPUTER SCIENCE;

UBIQUITOUS COMPUTING;

EID: 84881496404     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PerComW.2013.6529497     Document Type: Conference Paper

References (31)

1. D. Barrera, H. G. u. c. Kayacik, P. C. van Oorschot, and A. Somayaji. A methodology for empirical analysis of permission-based security models and its application to Android. In Computer and Communications Security, pages 73-84, 2010.
2. R. Böhme and S. Köpsell. Trained to accept?: A field experiment on consent dialogs. In CHI, pages 2403-2406, 2010.
3. M. Boldt and B. Carlsson. Privacy-invasive software and preventive mechanisms. In PROC of ICSNC, 2006.
4. J. Bonneau and S. Preibusch. The privacy jungle: On the market for data protection in social networks. In WEIS, 2009.
5. N. Christin, S. Egelman, T. Vidas, and J. Grossklags. It's all about the benjamins: An empirical study on incentivizing users to ignore security advice. In Financial Crypto, 2011.
6. N. Doty and E. Wilde. Geolocation privacy and application platforms. In PROC of ACM SIGSPATIAL Workshop on Security and Privacy in GIS and LBS, pages 65-69, 2010.
7. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In PROC of the USENIX conference on OSDI, pages 1-6, 2010.
8. W. Enck, D. Octeau, P. McDaniel, and S. Chaudhuri. A study of android application security. In PROC of the USENIX conference on Security, pages 21-21, 2011.
9. A. P. Felt, E. Chin, S. Hanna, D. Song, and D. Wagner. Android permissions demystified. In Computer and Communications Security, pages 627-638, 2011.
10. A. P. Felt, K. Greenwood, and D. Wagner. The effectiveness of application permissions. In PROC of the 2nd USENIX conference on Web application development, WebApps'11, 2011.
11. P. Gilbert, B.-G. Chun, L. P. Cox, and J. Jung. Vision: automated security validation of mobile apps at app markets. In PROC of MCS, pages 21-26, 2011.
12. J. Goecks, W. K. Edwards, and E. D. Mynatt. Challenges in supporting end-user privacy and security management with social navigation. In PROC of SOUPS, pages 5:1-5:12, 2009.
13. N. Good, R. Dhamija, J. Grossklags, D. Thaw, S. Aronowitz, D. Mulligan, and J. Konstan. Stopping spyware at the gate: a user study of privacy, notice and spyware. In PROC of SOUPS, SOUPS '05, 2005.
14. N. S. Good, J. Grossklags, D. K. Mulligan, and J. A. Konstan. Noticing notice: a large-scale experiment on the timing of software license agreements. In PROC of CHI, CHI '07, pages 607-616, 2007.
15. J. Grossklags and N. Good. Empirical studies on software notices to inform policy makers and usability designers. In PROC of Financial cryptography and Usable Security, pages 341-355, 2007.
16. H. Hochheiser. The platform for privacy preference as a social protocol: An examination within the u.s. policy context. ACM Trans. Internet Technol., 2(4):276-306, 2002.
17. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall. These aren't the droids you're looking for: retrofitting android to protect data from imperious applications. In Computer and Communications Security, pages 639-652, 2011.
18. C. Jensen and C. Potts. Privacy policies as decision-making tools: an evaluation of online privacy notices. In PROC of CHI, pages 471-478, 2004.
19. M. Kay and M. Terry. Textured agreements: re-envisioning electronic consent. In PROC of SOUPS, pages 13:1-13:13, 2010.
20. P. G. Kelley, J. Bresee, L. F. Cranor, and R. W. Reeder. A "nutrition label" for privacy. In PROC of the 5th Symposium on Usable Privacy and Security, SOUPS '09, pages 4:1-4:12, 2009.
21. P. G. Kelley, L. Cesca, J. Bresee, and L. F. Cranor. Standardizing privacy notices: an online study of the nutrition label approach. In PROC of CHI, pages 1573-1582, 2010.
22. J. King, A. Lampinen, and A. Smolen. Privacy: Is there an app for that? November 2011.
23. D. Mulligan. Information disclosure as a light-weight regulatory mechanism. In DIMACS workshop on information security economics, pages 18-19, 2007.
24. M. Nauman, S. Khan, and X. Zhang. Apex: extending android permission model and enforcement with user-defined runtime constraints. In Asia Computer and Communications Security, pages 328-332, 2010.
25. R. Schlegel, A. Kapadia, and A. J. Lee. Eyeing your exposure: Quantifying and controlling information sharing for improved privacy. In SOUPS, 2011.
26. J. C. Sipior, B. T. Ward, and G. R. Roselli. A united states perspective on the ethical and legal issues of spyware. In PROC of ICEC, ICEC '05, pages 738-743, 2005.
27. J. Tam, R. W. Reeder, and S. Schechter. I'm allowing what? disclosing the authority applications demand of users as a condition of installation. May 2010.
28. T. Vidas, N. Christin, and L. Cranor. Curbing Android permission creep. In PROC of W2SP, 2011.
29. T. Vila, R. Greenstadt, and D. Molnar. Why we can't be bothered to read privacy policies models of privacy economics as a lemons market. In PROC of ICEC, pages 403-407, 2003.
30. W3C. Platform for privacy preferences (p3p) project, Dec. 2007.
31. Y. Wang, G. Norcie, S. Komanduri, A. Acquisti, P. Leon, and L. Cranor. I regretted the minute i pressed share: A qualitative study of regrets on facebook. In Proceedings of the Seventh Symposium on Usable Privacy and Security, page 10. ACM, 2011.