Alde: Privacy risk analysis of analytics libraries in the android ecosystem

Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST

Volumn 198 LNICST, Issue , 2017, Pages 655-672

  Liu, Xing ^a   Zhu, Sencun ^b,c   Wang, Wei ^a   Liu, Jiqiang ^a  

^a BEIJING JIAOTONG UNIVERSITY   (China)

^b The Pennsylvania State University   (United States)

^c PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Analytics libraries; Android; Privacy leakage

Indexed keywords

LIBRARIES; RISK ANALYSIS; RISK ASSESSMENT; STATIC ANALYSIS;

ANDROID; DESIGN AND IMPLEMENTS; GOOGLE PLAYS; MOBILE APPLICATIONS; PRIVACY LEAKAGES; PRIVACY POLICIES; PRIVACY RISKS; PRIVATE INFORMATION;

ANDROID (OPERATING SYSTEM);

EID: 85019903808     PISSN: 18678211     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-319-59608-2_36     Document Type: Conference Paper

References (29)

1. Admob: Admob by Google (2016). https://www.google.com/admob/
2. Admob: Admob quick start (2016). https://developers.google.com/admob/ android/quick-start?hl=en
3. Android: Dalvik bytecode (2016). https://source.android.com/devices/tech/ dalvik/dalvik-bytecode.html
4. Android: Monkey runner (2016). https://developer.android.com/studio/test/ monkeyrunner/index.html
5. Apktool: Apktool (2016). http://ibotpeaches.github.io/Apktool/
6. Appbrain: Appbrain stats, May 2016. http://www.appbrain.com/stats
7. Appsee: Appsee, 09 March 2016. https://www.appsee.com
8. Balebako, R., Marsh, A., Lin, J., Hong, J.I., Cranor, L.F.: The privacy and security behaviors of smartphone app developers (2014)
9. Book, T., Wallach, D.S.: A case of collusion: a study of the interface between ad libraries and their apps. In: Proceedings of the Third ACM Workshop on Security and Privacy in Smartphones & Mobile Devices, pp. 79–86. ACM (2013)
10. Book, T., Wallach, D.S.: An empirical study of mobile ad targeting. arXiv preprint arXiv:1502.06577 (2015)
11. Chen, T., Ullah, I., Ali Kaafar, M., Boreli, R.: Information leakage through mobile analytics services. In: Proceedings of the 15th Workshop on Mobile Computing Systems and Applications, p. 15. ACM (2014)
12. Demetriou, S., Merrill, W., Yang, W., Zhang, A., Gunter, C.A.: Free for all! Assessing user data exposure to advertising libraries on android. In: NDSS 2016 (2016)
13. Eguan: Eguan mobile apps top list, March 2016. http://qianfan.analysys.cn/ user-radar/view/ranking/topRanking.html
14. Flurry: Custom events with flurry analytics for Android (2016). https://developer. yahoo.com/flurry/docs/analytics/gettingstarted/events/android/
15. Grace, M.C., Zhou, W., Jiang, X., Sadeghi, A.-R.: Unsafe exposure analysis of mobile in-app advertisements. In: Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, pp. 101–112. ACM (2012)
16. Han, S., Jung, J., Wetherall, D.: A study of third-party tracking by mobile apps in the wild. Technical report, University of Washington (2012)
17. JesusFreke: Smali (2016). https://github.com/JesusFreke/smali
18. Meng, W., Ding, R., Chung, S.P., Han, S., Lee, W.: The price of free: privacy leakage in personalized mobile in-app ads. In: NDSS Symposium 2016 (2016)
19. Milano, D.T.: Androidviewclient (2016). https://github.com/dtmilano/ AndroidViewClient
20. Mobyaffiliates: The best app analytics tools list (2015). http://www.mobyaffiliates. com/guides/best-app-analytics-tools-list/
21. Nath, S.: Madscope: characterizing mobile in-app targeted ads. In: Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services, pp. 59–73. ACM (2015)
22. LLC SaurikIT: Cydia substrate: the powerful code modification platform behind cydia (2016). http://www.cydiasubstrate.com/
23. Slavin, R., Wang, X., Hosseini, M.B., Hester, J., Krishnan, R., Bhatia, J., Breaux, T.D., Niu, J.: Toward a framework for detecting privacy policy violations in Android application code. In: Proceedings of the 38th International Conference on Software Engineering, pp. 25–36. ACM (2016)
24. Spreitzer, R.: Pin skimming: exploiting the ambient-light sensor in mobile devices. In: Proceedings of the 4th ACM Workshop on Security and Privacy in Smartphones & Mobile Devices, pp. 51–62. ACM (2014)
25. Talkingdata: Talkingdata (2016). https://www.talkingdata.com/
26. Umeng: Umeng (2016). https://www.umeng.com/
27. UxCam: Uxcam, 09 March 2016. https://uxcam.com
28. Xu, Z., Bai, K., Zhu, S.: Taplogger: inferring user inputs on smartphone touchscreens using on-board motion sensors. In: Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, pp. 113–124. ACM (2012)
29. Yu, L., Zhang, T., Luo, X., Xue, L.: Autoppg: towards automatic generation of privacy policy for Android applications. In: Proceedings of the 5th Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices, pp. 39–50. ACM (2015)