Dude, ask the experts!: Android resource access permission recommendation with RecDroid
Dude, ask the experts!: Android resource access permission recommendation with RecDroid
复制标题
哥们，请教专家！：RecDroid 的 Android 资源访问权限推荐
DOI：
10.1109/inm.2015.7140304
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Tam N. Vu
中科院分区：
文献类型：
--
作者：
Bahman Rashidi;Carol J. Fung;Tam N. Vu
随着智能手机应用程序的指数级增长，应用程序市场（例如 Google App Store）无法彻底验证应用程序是否合法或恶意。因此，移动用户只能自行决定应用程序是否可以安全使用。更糟糕的是，最近的研究表明，市场上大多数应用程序都要求收集与应用程序主要功能无关的数据，这可能会导致私人信息泄露或移动资源利用效率低下。为了帮助用户做出是否接受权限请求的正确决定，我们提出了 RecDroid。 RecDroid是一个众包推荐框架，它收集应用程序的权限请求和用户的权限响应，其中使用排名算法来评估用户的专业水平，并使用投票算法来计算对权限请求的适当响应（接受或拒绝）。为了引导推荐系统，RecDroid 依赖于一小组种子专家用户，他们可以为一小部分应用程序提供可靠的推荐。我们的评估结果表明，通过仔细选择参数，RecDroid 可以提供高精度和令人满意的覆盖范围。结果还表明，种子专家的少量覆盖足以让 RecDroid 满足大多数应用程序请求。
With the exponential growth of smartphone apps, it is prohibitive for apps market places, such as Google App Store for example, to thoroughly verify if an app is legitimate or malicious. As a result, mobile users are left to decide for themselves whether an app is safe to use. Even worse, recent studies have shown that most apps in markets request to collect data irrelevant to the main functions of the apps, which could cause leaking of private information or inefficient use of mobile resources. To assist users to make a right decision as for whether a permission request should be accepted, we propose RecDroid. RecDroid is a crowdsourcing recommendation framework that collects apps' permission requests and users' permission responses, from which a ranking algorithm is used to evaluate the expertise level of users and a voting algorithm is used to compute an appropriate response to the permission request (accept or reject). To bootstrap the recommendation system, RecDroid relies on a small set of seed expert users that could make reliable recommendations for a small set of application. Our evaluation results show that RecDroid can provide high accuracy and satisfying coverage with careful selection of parameters. The results also show that a small coverage from seed experts is sufficient for RecDroid to cover the majority of the app requests.