Detection of Conflicts between APP's Privacy Policy and Actual Behavior: A Security Analysis System

2023 7th International Conference on Cryptography, Security and Privacy (CSP) Pub Date : 2023-04-01 DOI:10.1109/CSP58884.2023.00015

Tong Wu, Qinbo Liu, Binchang Li, Feng Luo, Weilong Li, Yang Liu

引用次数: 0

Abstract

Leaks of user privacy in the mobile cloud environment have been common in recent years. Common APP stores require apps to have a user privacy policy that complies with applicable laws. Due to the problem of lengthy papers or difficult-to-understand sentences in privacy policies, users frequently skip reading them or fail to comprehend them. Moreover, there may be conflicts between the privacy policy and the actual behaviors. In order to alleviate these problems above, we design a security analysis system that employs natural language processing to detect conflicts between an APP's privacy policy and its actual behaviors. Experimental results show that the analysis accuracy is improved compared with existing methods.

查看原文本刊更多论文

APP隐私政策与实际行为冲突的检测:一种安全分析系统

近年来，移动云环境中的用户隐私泄露事件屡见不鲜。普通应用商店要求应用具有符合适用法律的用户隐私政策。由于隐私政策中篇幅过长或句子难懂的问题，用户经常会跳过阅读或无法理解。此外，隐私政策与实际行为之间可能存在冲突。为了缓解上述问题，我们设计了一个安全分析系统，利用自然语言处理来检测APP的隐私政策与实际行为之间的冲突。实验结果表明，与现有方法相比，该方法的分析精度得到了提高。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

2023 7th International Conference on Cryptography, Security and Privacy (CSP)

自引率

0.00%

发文量