一句话:提出基于 UI 感知的 Android 应用自动化细粒度权限控制,让用户知悉并拒绝越权权限使用。
论文关注 Android 应用中权限使用的透明性与用户控制问题:用户应当知道应用在其范围内如何使用已授予权限,并有权在权限被用于非指定用途、可能构成恶意行为时拒绝该应用。为此,作者提出一种基于 UI 感知的自动化细粒度权限控制方法,旨在通过对用户界面或交互的感知来识别权限使用情境,并实施更细粒度的授权或拒绝。摘要仅给出这一动机与方向,未提供具体技术机制、实验设置或评估结果,因此无法从摘要判断其检测精度、性能开销与用户研究效果。
It is the basic right of a user to know how the permissions are used within the Android app’s scope and to refuse the app if granted permissions are used for the activities other than specified use which can amount to malicious behavior.
@inproceedings{paperbot7325,
title = {Right to Know, Right to Refuse: Towards UI Perception-Based Automated Fine-Grained Permission Controls for Android Apps},
author = {Vikas Kumar Malviya and Chee Wei Leow and Ashok Kasthuri and Yan Naing Tun and Lwin Khin Shar and Lingxiao Jiang},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3559556}
}