NDLI: Detecting privacy leaks in the RATP App: how we proceeded and what we found

Please wait, while we are loading the content...

Detecting privacy leaks in the RATP App: how we proceeded and what we found

Content Provider	Springer Nature Link
Author	Achara, Jagdish Prasad Lefruit, James Douglass Roca, Vincent Castelluccia, Claude
Copyright Year	2014
Abstract	We analyzed the RATP App, both Android and iOS versions, using our instrumented versions of these mobile OSs. Our analysis reveals that both versions of this App leak private data to third-party servers, which is in total contradiction to the In-App privacy policy. The iOS version of this App doesn’t even respect Apple guidelines on cross-App user tracking for advertising purposes and employs various other cross-App tracking mechanisms that are not supposed to be used by Apps. Even if this work is illustrated with a single App, we describe an approach that is generic and can be used to detect privacy leaks from other Apps. In addition, our findings are representative of a trend in Advertising and Analytics (A&A) libraries that try to collect as much information as possible regarding the smartphone and its user to have a better profile of the user’s interests and behaviors. In fact, in case of iOS, these libraries even generate their own persistent identifiers and share it with other Apps through covert channels to better track the user, and this happens even if the user has opted-out of device tracking for advertising purposes. Above all, this happens without the user knowledge, and sometimes even without the App developer’s knowledge who might have naively included these libraries during the App development. Therefore this article raises many questions concerning both the bad practices employed in the world of smartphones and the limitations of the privacy control features proposed by Android/iOS Mobile OSs.
Starting Page	229
Ending Page	238
Page Count	10
File Format	PDF
ISSN	17729890
Journal	Journal in Computer Virology
Volume Number	10
Issue Number	4
e-ISSN	22638733
Language	English
Publisher	Springer Paris
Publisher Date	2014-01-05
Publisher Place	Paris
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Android iOS Privacy RATP App Computer Science
Content Type	Text
Resource Type	Article
Subject	1700/1701 Hardware and Architecture

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Detecting Privacy Leaks in the RATP App: how we proceeded and what we found

Detecting Privacy Leaks in the RATP App: how we proceeded and what we found

(JCVHT)) (2013)" Detecting Privacy Leaks in the RATP App: how we proceeded and what we found (2013)

Data Safety vs. App Privacy: Comparing the Usability of Android and iOS Privacy Labels

Anti-debugging scheme for protecting mobile apps on android platform

MobileAppScrutinator: A Simple yet Efficient Dynamic Analysis Approach for Detecting Privacy Leaks across Mobile OSs

AndroidLeaks: Detecting Privacy Leaks in Android.

Identification of malicious android app using manifest and opcode features

Cross-Compiling Android Applications to iOS and Windows Phone 7

Detecting privacy leaks in the RATP App: how we proceeded and what we found

Similar Documents

Detecting Privacy Leaks in the RATP App: how we proceeded and what we found

Detecting Privacy Leaks in the RATP App: how we proceeded and what we found

(JCVHT)) (2013)" Detecting Privacy Leaks in the RATP App: how we proceeded and what we found (2013)

Data Safety vs. App Privacy: Comparing the Usability of Android and iOS Privacy Labels

Anti-debugging scheme for protecting mobile apps on android platform

MobileAppScrutinator: A Simple yet Efficient Dynamic Analysis Approach for Detecting Privacy Leaks across Mobile OSs

AndroidLeaks: Detecting Privacy Leaks in Android.

Identification of malicious android app using manifest and opcode features

Cross-Compiling Android Applications to iOS and Windows Phone 7

Detecting privacy leaks in the RATP App: how we proceeded and what we found