Understanding Mobile Users' Privacy Expectations: A Recommendation-Based Method Through Crowdsourcing
Understanding Mobile Users' Privacy Expectations: A Recommendation-Based Method Through Crowdsourcing
复制标题
了解移动用户的隐私期望：通过众包的基于推荐的方法
DOI：
10.1109/tsc.2016.2636285
复制
发表时间：
2019-03-01
影响因子：
8.1
通讯作者：
Yu, Ruiyun
中科院分区：
文献类型：
--
作者：
Liu, Rui;Liang, Junbin;Yu, Ruiyun
隐私是移动应用程序的一个关键问题，因为智能手机中存在过多的个人和敏感信息。人们提出了许多机制和工具来检测和缓解隐私泄露。然而，他们很少考虑用户的偏好和期望。用户对不同的移动应用有着不同的期望。例如，用户可能会允许社交应用程序访问他们的照片，而不是游戏应用程序，因为这超出了用户访问个人照片的预期。因此，我们认为，了解用户对各种移动应用的隐私期望，帮助他们缓解智能手机带来的隐私风险，是切实可行的，也是有益的。为了实现这一目标，我们提出并实现了PriWe系统，这是一个基于众包的系统，由用户贡献其智能手机上安装的应用程序的隐私权限设置。PriWe利用众包权限设置来了解用户的隐私期望，并提供特定于应用程序的建议，以缓解信息泄露。我们在现实世界中部署了PriWe进行评估。根据78名评估我们的系统的用户和422名完成调查的参与者的反馈，PriWe能够做出符合参与者隐私期望并被用户接受的适当推荐，从而帮助他们缓解智能手机中的隐私泄露。
Privacy is a pivotal issue of mobile apps because there is a plethora of personal and sensitive information in smartphones. Many mechanisms and tools are proposed to detect and mitigate privacy leaks. However, they rarely consider users' preferences and expectations. Users hold various expectation towards different mobile apps. For example, users may allow a social app to access their photos rather than a game app because it goes beyond users' expectation to access personal photos. Therefore, we believe it is practical and beneficial to understand users' privacy expectations on various mobile apps and help them mitigate privacy risks introduced by smartphones. To achieve this objective, we propose and implement PriWe, a system based on crowdsourcing driven by users who contribute privacy permission settings of the apps installed on their smartphones. PriWe leverages the crowdsourced permission settings to understand users' privacy expectations and provides app specific recommendations to mitigate information leakage. We deployed PriWe in the real world for evaluation. According to the feedback of 78 users who evaluated our system and 422 participants who completed our survey, PriWe is able to make proper recommendations which can match participants' privacy expectations and are mostly accepted by users, thereby help them to mitigate privacy disclosure in smartphones.