NDLI: Effective Risk Communication for Android Apps

Please wait, while we are loading the content...

Effective Risk Communication for Android Apps

Content Provider	IEEE Xplore Digital Library
Author	Gates, C.S. Jing Chen Ninghui Li Proctor, R.W.
Copyright Year	2004
Abstract	The popularity and advanced functionality of mobile devices has made them attractive targets for malicious and intrusive applications (apps). Although strong security measures are in place for most mobile systems, the area where these systems often fail is the reliance on the user to make decisions that impact the security of a device. As our prime example, Android relies on users to understand the permissions that an app is requesting and to base the installation decision on the list of permissions. Previous research has shown that this reliance on users is ineffective, as most users do not understand or consider the permission information. We propose a solution that leverages a method to assign a risk score to each app and display a summary of that information to users. Results from four experiments are reported in which we examine the effects of introducing summary risk information and how best to convey such information to a user. Our results show that the inclusion of risk-score information has significant positive effects in the selection process and can also lead to more curiosity about security-related information.
Sponsorship	IEEE Computer Society
Starting Page	252
Ending Page	265
Page Count	14
File Size	1291621
File Format	PDF
ISSN	15455971
Volume Number	11
Issue Number	3
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-01-01
Publisher Place	U.S.A.
Access Restriction	One Nation One Subscription (ONOS)
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Privacy Security Androids Humanoid robots Smart phones Mobile communication mobile security Risk communication usability
Content Type	Text
Resource Type	Article
Subject	Computer Science Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

MOSES: Supporting and Enforcing Security Profiles on Smartphones

A Large-Scale Empirical Study on Software Reuse in Mobile Apps

Learning Mobile Security with Labware

Towards Automated Risk Assessment and Mitigation of Mobile Applications

Evolution, Detection and Analysis of Malware for Smart Devices

Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps

Smartphone Security

Generating Summary Risk Scores for Mobile Applications

MobiGUITAR: Automated Model-Based Testing of Mobile Apps

Effective Risk Communication for Android Apps

Similar Documents

MOSES: Supporting and Enforcing Security Profiles on Smartphones

A Large-Scale Empirical Study on Software Reuse in Mobile Apps

Learning Mobile Security with Labware

Towards Automated Risk Assessment and Mitigation of Mobile Applications

Evolution, Detection and Analysis of Malware for Smart Devices

Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps

Smartphone Security

Generating Summary Risk Scores for Mobile Applications

MobiGUITAR: Automated Model-Based Testing of Mobile Apps

Effective Risk Communication for Android Apps