Upload File

Download - Towards Privacy -Preserving Mobile Apps: A …publish.illinois.edu/science-of-security-lablet/files/...Towards Privacy -Preserving Mobile Apps: A Balancing Act DengfengLi1, Wing Lam1,

Transcript
Page 1: Towards Privacy -Preserving Mobile Apps: A …publish.illinois.edu/science-of-security-lablet/files/...Towards Privacy -Preserving Mobile Apps: A Balancing Act DengfengLi1, Wing Lam1,

TowardsPrivacy-PreservingMobileApps:ABalancingActDengfeng Li1,WingLam1,WeiYang1,Zhengkai Wu1,Xusheng Xiao2,TaoXie1

1(UniversityofIllinoisatUrbana-Champaign,email:[email protected])2(CaseWesternReserveUniversity,email:[email protected])

Objective• Maximizeutilitieswhileminimizingtheamountofsensitiveinformationexposedtoprotectusers'appusagedata

Motivation• Collectingsomehighlysensitiveinformationprovideslittleornobenefittowardsdeliveringanapp’sutilities• Existingtechniqueslackcustomizedsolutionstopreserveuserprivacyatdifferentlevelswhiledeliveringuser-desirablelevelofutilityefficacy(e.g.,thenumberofenabledfeatures)

Example– Appdisplaysvideosonlyifsomesensitiveinformationispreviouslysenttoaremoteserver[1]

1.Sensitive-InputDetection• LeverageUIrendering,geometricallayoutanalysis,andNLPtoidentifysensitiveinputfields• Leveragesstaticdataflowanalysistodetectsensitiveinformation(suchasaGPSlocation)obtainedfromthesystem

4.Privacy-PreservingBalancing• Anonymizevarioussensitiveinformationwhileassuringthatthelevelofutilityefficacyisaboveauser-predefinedthreshold

3.Privacy-PolicyComplianceChecking• Checkwhetherthesensitiveinformationcollectedbyanappisprivacypreservingagainstthedeclaredprivacypolicy• Conductstaticdataflowanalysisontheappanditsbackendservertogenerateausagesummaryoftheobtainedsensitiveinformation• LeverageNLPtoannotatedeclaredprivacypolicytoextractkeyfeaturesrelatedtosensitive-informationusage• Checkgeneratedusagesummarywithextractedkeyfeaturesforinconsistencies

2.Utility-ImpactAnalysis• Anonymizeeachinput,andmeasureitsimpactontheutilitiesofanapp andproduceanutilityreport• Providemeasurementtoshowhoweachinputcontributestoanapp’sutilities

Proposedframework

[1]AndroidMalwarePromisesVideoWhileStealingContacts:https://securingtomorrow.mcafee.com/mcafee-labs/android-malware-promises-video-while-stealing-contacts/

ThismaterialisbaseduponworksupportedbytheMarylandProcurementOfficeunderContractNo.H98230-14-C-0141

Top Related

Privacy Preserving Statistics - TigerPrints
Privacy Preserving Statistics - TigerPrints
Privacy-Preserving Data Mining - Yale University · •Policies for privacy-preserving data mining: languages, reconciliation, and enforcement. •Incentive-compatible privacy-preserving
Privacy-Preserving Data Mining - Yale University · •Policies for privacy-preserving data mining: languages, reconciliation, and enforcement. •Incentive-compatible privacy-preserving
Accuracy constrained privacy-preserving
Accuracy constrained privacy-preserving
Privacy-Preserving Location Services
Privacy-Preserving Location Services
1 Privacy Preserving Data Mining Haiqin Yang Extracted from a ppt “Secure Multiparty Computation and Privacy” Added “Privacy Preserving SVM”
1 Privacy Preserving Data Mining Haiqin Yang Extracted from a ppt “Secure Multiparty Computation and Privacy” Added “Privacy Preserving SVM”
Privacy Preserving Data Mining
Privacy Preserving Data Mining
PRIVACY PRESERVING MACHINE LEARNING
PRIVACY PRESERVING MACHINE LEARNING
Towards privacy preserving social recommendation under ...jundongl/paper/Towards privacy preserving social recommendation under personalized privacy settings ... privacy-preserving
Towards privacy preserving social recommendation under ...jundongl/paper/Towards privacy preserving social recommendation under personalized privacy settings ... privacy-preserving