School of Computer Science, Universiti Sains Malaysia, Gelugor 11800, Penang, Malaysia.
Sensors (Basel). 2021 Mar 1;21(5):1667. doi: 10.3390/s21051667.
An Android smartphone contains built-in and externally downloaded applications that are used for entertainment, finance, navigation, communication, health and fitness, and so on. The behaviour of granting permissions requested by apps might expose the Android smartphone user to privacy risks. The existing works lack a formalized mathematical model that can quantify user and system applications risks. No multifaceted data collector tool can also be used to monitor the collection of user data and the risk posed by each application. A benchmark of the risk level that alerts the user and distinguishes between acceptable and unacceptable risk levels in Android smartphone user does not exist. Hence, to address privacy risk, a formalized privacy model called PRiMo that uses a tree structure and calculus knowledge is proposed. An App-sensor Mobile Data Collector (AMoDaC) is developed and implemented in real life to analyse user data accessed by mobile applications through the permissions granted and the risks involved. A benchmark is proposed by comparing the proposed PRiMo outcome with the existing available testing metrics. The results show that Tools & Utility/Productivity applications posed the highest risk as compared to other categories of applications. Furthermore, 29 users faced low and acceptable risk, while two users faced medium risk. According to the benchmark proposed, users who faced risks below 25% are considered as safe. The effectiveness and accuracy of the proposed work is 96.8%.
安卓智能手机内置和外部下载的应用程序可用于娱乐、金融、导航、通信、健康和健身等。应用程序请求权限的行为可能会使用户面临隐私风险。现有工作缺乏一种形式化的数学模型来量化用户和系统应用程序的风险。也没有多方面的数据收集工具可以用来监控用户数据的收集和每个应用程序所带来的风险。目前还没有一个风险级别基准来提醒用户,并区分安卓智能手机用户可接受和不可接受的风险级别。因此,为了解决隐私风险,提出了一种名为 PRiMo 的形式化隐私模型,该模型使用树结构和微积分知识。开发并实现了一个名为 App-sensor Mobile Data Collector (AMoDaC) 的应用程序,通过授予的权限和涉及的风险来分析移动应用程序访问的用户数据。通过将提出的 PRiMo 结果与现有的可用测试指标进行比较,提出了一个基准。结果表明,与其他类别的应用程序相比,工具和实用程序/生产力应用程序的风险最高。此外,有 29 位用户面临低风险和可接受风险,而有两位用户面临中风险。根据所提出的基准,风险低于 25%的用户被认为是安全的。所提出工作的有效性和准确性为 96.8%。