一句话:提出用自然语言处理与代码分析,解释隐私政策术语并映射 Android 布局中的信息类型。
移动应用为提供多样服务会收集不同类别的个人信息,公司通过隐私政策中的关键要求向用户说明数据实践。随着个人信息访问和移动应用部署规模增长,追踪隐私政策要求与应用代码之间的链接愈发重要。自动追踪可借助自然语言处理和代码分析实现,但面临两个挑战:隐私政策术语存在歧义,以及 GUI 输入框提供的用户信息类型不受限。本文提出方法,解释隐私政策中的抽象术语,识别 Android 布局代码中的信息类型,并利用自然语言处理技术建立二者之间的映射。
Mobile apps collect dierent categories of personal information to provide users with various services. Companies use privacy policies containing critical requirements to inform users about their data practices. With the growing access to personal information and the scale of mobile app deployment, traceability of links between privacy policy requirements and app code is increasingly important. Automated traceability can be achieved using natural language processing and code analysis techniques. However, such techniques must address two main challenges: ambiguity in privacy policy terminology and unbounded information types provided by users through input elds in GUI. In this work, we propose approaches to interpret abstract terms in privacy policies, identify information types in Android layout code, and create a mapping between them using natural language processing techniques.