Free for All! Assessing User Data Exposure to Advertising Libraries on Android
Free for All! Assessing User Data Exposure to Advertising Libraries on Android
复制标题
DOI：
10.14722/ndss.2016.23082
复制
发表时间：
2016-02
期刊：
影响因子：
--
通讯作者：
Soteris Demetriou;Whitney Merrill;Wei Yang;Aston Zhang;Carl A. Gunter
中科院分区：
文献类型：
--
作者：
Soteris Demetriou;Whitney Merrill;Wei Yang;Aston Zhang;Carl A. Gunter
在这项工作中，我们系统地探索通过这些渠道的广告库的潜在影响力。我们设计了一个名为Pluto的框架，可以利用它来分析应用程序，并发现它是否将目标用户数据（如联系人信息，兴趣，人口统计数据，医疗条件等）暴露给机会主义广告库。我们提出了一个原型实现的冥王星，体现了新的策略，使用自然语言处理来说明有针对性的数据可以从广告网络使用文件和用户输入学习。Pluto还利用机器学习和数据挖掘模型来揭示广告网络可以从安装的应用程序列表中了解到什么。我们使用一系列应用程序来验证Pluto，我们已经确定了它们可能揭示的目标数据的基本事实，以及从我们进行的调查中获得的数据集，该调查为目标数据提供了基本事实，并为大约300名用户提供了相应的已安装应用程序列表。我们使用这些数据来表明，Pluto以及机会主义广告网络可以对来自应用程序文件和输入的选定目标数据实现75%的召回率和80%的准确率，甚至可以根据已安装应用程序的列表对某些目标数据实现更好的结果。Pluto是第一个基于四个可用渠道和任意目标数据集来评估与应用程序中集成广告相关的风险的工具。
In this work, we systematically explore the potential reach of advertising libraries through these channels. We design a framework called Pluto that can be leveraged to analyze an app and discover whether it exposes targeted user data—such as contact information, interests, demographics, medical conditions and so on—-to an opportunistic ad library. We present a prototype implementation of Pluto, that embodies novel strategies for using natural language processing to illustrate what targeted data can potentially be learned from an ad network using files and user inputs. Pluto also leverages machine learning and data mining models to reveal what advertising networks can learn from the list of installed apps. We validate Pluto with a collection of apps for which we have determined ground truth about targeted data they may reveal, together with a data set derived from a survey we conducted that gives ground truth for targeted data and corresponding lists of installed apps for about 300 users. We use these to show that Pluto, and hence also opportunistic ad networks, can achieve 75% recall and 80% precision for selected targeted data coming from app files and inputs, and even better results for certain targeted data based on the list of installed apps. Pluto is the first tool that estimates the risk associated with integrating advertising in apps based on the four available channels and arbitrary sets of targeted data.