一句话：提出端到端方法，自动诊断浏览器扩展在隐私政策、法规要求与运行时实际隐私实践上的合规违规。
浏览器扩展已成为现代浏览器的集成特性，用于增强在线浏览体验，但其处于用户与互联网之间的有利位置，使扩展能够轻易访问用户敏感数据，引发立法者和扩展用户日益增长的隐私担忧。本文提出一种端到端的自动化方法，用于诊断扩展中的隐私合规违规。该方法从两个层面进行分析：隐私政策与法规要求之间的合规性，以及扩展在运行时与隐私相关的实际实践。作者认为，该机制可作为扩展用户、开发者和应用商店运营者高效且实用的隐私合规违规检测手段。摘要未给出具体实验设置或量化结果。
Browser extensions have emerged as integrated characteristics in modern browsers, with the aim to boost the online browsing experience. Their advantageous position between a user and the Internet endows them with easy access to the user’s sensitive data, which has raised mounting privacy concerns from both legislators and extension users. In this work, we propose an end-to-end approach to automatically diagnosing the privacy compliance violations among extensions. It analyzes the compliance of privacy policy versus regulation requirements and their actual privacy-related practices during runtime. This approach can serve the extension users, developers and store operators as an efficient and practical detection mechanism for privacy compliance violations.
@inproceedings{paperbot7178,
title = {Are they Toeing the Line? Diagnosing Privacy Compliance Violations among Browser Extensions},
author = {Yuxi Ling and Kailong Wang and Guangdong Bai and Haoyu Wang and Jin Song Dong},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3560436}
}