NDLI: There are many apps for that: quantifying the availability of privacy-preserving apps

Please wait, while we are loading the content...

User authentication and identification from user interface interactions on touch-enabled devices

Quantifying the reflective DDoS attack capability of household IoT devices

SeED: secure non-interactive attestation for embedded devices

Massive reactive smartphone-based jamming using arbitrary waveforms and adaptive power control

Advancing attacker models of satellite-based localization systems: the case of multi-device attackers

Geosocial query with user-controlled privacy

Trashing IMSI catchers in mobile networks

There are many apps for that: quantifying the availability of privacy-preserving apps

Reliability model for multimedia cloud networks: poster

Using hover to compromise the confidentiality of user input on Android

Power-positive networking using wireless charging: protecting energy against battery exhaustion attacks

SCAPI: a scalable attestation protocol to detect software and physical attacks

HanGuard: SDN-driven protection of smart home WiFi devices from malicious mobile apps

PHY-layer security is no alternative to cryptography

Coresident evil: noisy vibrational pairing in the face of co-located acoustic eavesdropping

ESIoT: enabling secure management of the internet of things

Resilient privacy protection for location-based services through decentralization

Secure infotainment infrastructure of connected car: poster

UiRef: analysis of sensitive user inputs in Android applications

Physical-layer fingerprinting of LoRa devices using supervised and zero-shot learning

Anonymous attestations made practical

Unity is strength!: combining attestation and measurements inspection to handle malicious data injections in WSNs

An autonomic and permissionless Android covert channel

Insecure to the touch: attacking ZigBee 3.0 via touchlink commissioning

Challenges to PHY anonymity for wi-fi

CrowdZen privacy: poster

Towards continuous and passive authentication across mobile devices: an empirical study

HYDRA: hybrid design for remote attestation (using a formally verified microkernel)

Binary hash tree based certificate access management for connected vehicles

YELP: masking sound-based opportunistic attacks in zero-effort deauthentication

Breaking and fixing the HB+DB protocol

Scalable privacy: poster

Bloom filter based certificate validation for VANET: poster

TTPP method for validation of k-anonymity on wi-fi association log data: poster

Highly-accurate rogue access point detection using intentional channel interference: poster

Two-level network monitoring and management in WLAN using software-defined networking: poster

Toward secure and efficient attestation for highly dynamic swarms: poster

A roaming-based denial of service attack on LTE networks: poster

Demonstrating reactive smartphone-based jamming: demo

Railway bridge health monitoring system using smart wireless sensor network: demo

There are many apps for that: quantifying the availability of privacy-preserving apps

Content Provider	ACM Digital Library
Author	Taylor, Vincent F. Beresford, Alastair R. Martinovic, Ivan
Abstract	The adage "there's an app for that" holds true in modern app stores. Indeed, app stores usually go further and provide multiple apps with very similar functionality; examples range from flashlight apps to alarm clocks. We call these functionally-similar apps. When searching for these apps, users are often presented with a vast array of choices, but no distinction is made in the user interface to highlight the relative privacy risks inherent in choosing one app over another. Yet the availability of many functionally-similar apps raises the question of whether some apps are significantly less invasive than others. In this paper, we take several steps toward answering this question. We begin by enumerating 2 500 groups of functionally-similar apps in the Google Play Store. Within groups of apps, we use static analysis to understand the real-world risks coming from apps with aggressive permission usage. By leveraging an established ranking system, and combining it with real-world data from over 28 000 Android devices, we quantify the improvements that can be made if users installed apps with privacy in mind. We observe that at least 25.6% of apps contain libraries that gratuitously exploit available permissions and find that 43.5% of apps could be swapped for comparable alternatives that require fewer permissions. Permissions saved may deliver important privacy and security improvements, including preventing access to the calendar (in 24% of cases), sending text messages (12%) and recording audio (8%). This is particularly important for apps which embed third-party libraries, since library code executes with the same permissions as the app itself.
Starting Page	247
Ending Page	252
Page Count	6
File Format	PDF
ISBN	9781450350846
DOI	10.1145/3098243.3098266
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-07-18
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

ProfileGuard: Privacy Preserving Obfuscation for Mobile User Profiles

Building privacy-preserving location-based apps

Privacy Preserving Collaboration in Bring-Your-Own-Apps

Πbox: a platform for privacy-preserving apps.

POSTER: The Popular Apps in Your Pocket Are Leaking Your Privacy

Privacy: Is There An App for That?

Building Privacy-preserving Location-based Apps

Fitness Apps : What Are the Privacy Risks ? Mobile Health and Fitness Apps : What Are the Privacy Risks ? [ 1 ]

1 privacy: is there an app for that?.

There are many apps for that: quantifying the availability of privacy-preserving apps

Similar Documents

ProfileGuard: Privacy Preserving Obfuscation for Mobile User Profiles

Building privacy-preserving location-based apps

Privacy Preserving Collaboration in Bring-Your-Own-Apps

Πbox: a platform for privacy-preserving apps.

POSTER: The Popular Apps in Your Pocket Are Leaking Your Privacy

Privacy: Is There An App for That?

Building Privacy-preserving Location-based Apps

Fitness Apps : What Are the Privacy Risks ? Mobile Health and Fitness Apps : What Are the Privacy Risks ? [ 1 ]

1 privacy: is there an app for that?.

There are many apps for that: quantifying the availability of privacy-preserving apps