Effect of User Expectation on Mobile App Privacy: A Field Study
Effect of User Expectation on Mobile App Privacy: A Field Study
复制标题
用户期望对移动应用隐私的影响：实地研究
DOI：
10.1109/percom53586.2022.9762379
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
A. Beresford
中科院分区：
文献类型：
--
作者：
Ricardo Mendes;André Brandão;J. Vilela;A. Beresford
用于移动的设备的许可管理器允许在需要许可的时候执行请求，从而使得用户能够根据他们的期望在上下文中准许/拒绝请求。然而，为了避免认知过载，第二次和后续请求通常在没有用户干预/意识的情况下自动被授予。本文探讨了这些自动化决策是否符合用户的期望。我们对93名参与者进行了实地研究，以收集他们的隐私决策，周围的环境以及每个请求是否是预期的。收集的65261个许可决定显示应用程序的实践和期望之间存在严重的不一致，因为几乎一半的请求是用户意想不到的。这个比例随着请求的权限、请求应用程序的类别和可见性以及用户本身而变化很大;也就是说，期望对每个人来说都是主观的。此外，隐私决策与用户期望最强相关，但这种相关性也是高度个人化的。最后，Android的默认权限管理器在15%的情况下会侵犯我们参与者的隐私。
Runtime permission managers for mobile devices allow requests to be performed at the time in which permissions are required, thus enabling the user to grant/deny requests in context according to their expectations. However, in order to avoid cognitive overload, second and subsequent requests are usually automatically granted without user intervention/awareness. This paper explores whether these automated decisions fit user expectations. We performed a field study with 93 participants to collect their privacy decisions, the surrounding context and whether each request was expected. The collected 65261 permission decisions revealed a strong misalignment between apps’ practices and expectation as almost half of requests are unexpected by users. This ratio strongly varies with the requested permission, the category and visibility of the requesting application and the user itself; that is, expectation is subjective to each individual. Moreover, privacy decisions are most strongly correlated with user expectation, but such correlation is also highly personal. Finally, Android’s default permission manager would have violated the privacy of our participants 15% of the time.