一句话:本文实证调查 Android 应用中安全代码异味的历时演变,检验开发者安全实践是否改善。
移动应用日益承担网银、电子医疗、电子政务等安全与隐私敏感任务,传感器也大量采集用户行为数据。法律虽对隐私数据处理提出要求,但用户仍需信任开发者提供充分保护。本文聚焦 Android 应用的安全状况,研究自 Android 操作系统引入以来,安全相关代码异味如何演变。作者通过实证调查刻画不同时期应用中的安全代码异味,以回答开发者的安全实践是否随时间改善。摘要未报告具体数据或结论,其贡献在于提出并执行这一历时性安全代码异味研究。
Users increasingly rely on mobile apps for everyday tasks, including security- and privacy-sensitive tasks such as online banking, e-health, and e-government. Additionally, a wealth of sensors captures the movements and habits of the users for fitness tracking and convenience. Despite legal regulations imposing requirements and limits on the processing of privacy-sensitive data, users must still trust the app developers to apply suffcient protections. In this paper, we investigate the state of security in Android apps and how security-related code smells have evolved since the introduction of the Android operating system.