No surprises: Measuring intrusiveness of smartphone applications by detecting objective context deviations

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 291-296

  Zhang, Frances ^a   Shih, Fuming ^a   Weitzner, Daniel ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

access pattern; context; intrusiveness; privacy; smartphone; visualization

Indexed keywords

ACCESS PATTERNS; CONTEXT; DATA COLLECTION; EMPIRICAL TESTING; INTRUSIVENESS; NOVEL VISUALIZATIONS; PRIVACY RISKS; SMART-PHONE APPLICATIONS;

APPLICATIONS; FLOW VISUALIZATION; RISK ASSESSMENT; SIGNAL ENCODING; SMARTPHONES; VISUALIZATION;

DATA PRIVACY;

EID: 84888985669     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2517840.2517864     Document Type: Conference Paper

References (17)

1. D. Boyd. Making sense of privacy and publicity, Mar. 2010.
2. E. Chin, A. P. Felt, V. Sekar, and D. Wagner. Measuring user confidence in smartphone security and privacy. In ACM SOUPS '12, 2012.
3. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. OSDI'10. USENIX Association, 2010.
4. Federal Trade Commission. Protecting Consumer Privacy in an Era of Rapid Change, March 2012.
5. A. P. Fuchs, A. Chaudhuri, and J. S. Foster. SCanDroid: Automated Security Certification of Android Applications. Technical Report CS-TR-4991, University of Maryland, 2009.
6. R. Gavison. Privacy and the Limits of Law. Yale LJ, 1979.
7. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall. These aren't the droids you're looking for: retrofitting android to protect data from imperious applications. CCS '11. ACM, 2011.
8. K. Irwin and T. Yu. An identifiability-based access control model for privacy protection in open systems. In Proceedings of the 2004 ACM workshop on Privacy in the electronic society. ACM, Oct. 2004.
9. M. M. Jan Lauren Boyles, Aaron Smith. Privacy and data management on mobile devices. Technical Report CS-2011-02, Pew Research Center, September 2012.
10. P. G. Kelley, S. Consolvo, L. F. Cranor, J. Jung, N. Sadeh, and D. Wetheral. A conundrum of permissions: Installng applications on an Android smartphone. In Proceedings of the Workshop on Usable Security (USEC), Feb. 2012.
11. J. King. "How come I'm Allowing Strangers to Go Through My Phone?": Smart Phones and Privacy Expectations. In ACM SOUPS '12, 2012.
12. J. Lin, S. Amini, J. I. Hong, N. Sadeh, J. Lindqvist, and J. Zhang. Expectation and purpose: Understanding users' mental models of mobile app privacy through crowdsourcing. In ACM Ubicomp'12.
13. C. Mancini, K. Thomas, Y. Rogers, B. Price, L. Jedrzejczyk, A. Bandara, A. Joinson, and B. Nuseibeh. From spaces to places: emerging contexts in mobile privacy. ACM Ubicomp '09.
14. E. McCallister, T. Grance, and K. Scarfone. Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) -Recommendations of the National Institute of Standards and Technology. Technical report, NIST, April 2010.
15. H. Nissenbaum. Privacy in context: Technology, policy, and the integrity of social life. Stanford Law Books, 2009.
16. P. Schwartz and D. Solove. The PII Problem: Privacy and a New Concept of Personally Identifiable Information. New York University Law Review, Aug. 2011.
17. White House. Consumer data privacy in a networked world: A framework for protecting privacy and promoting innovation in the global digital economy. February 2012.