一句话：对390款Android移动AR应用开展实证研究，揭示其危险权限、数据泄露与数据安全披露现状。
本文针对 Android 移动 AR 应用日益普及且通常持续访问摄像头、收集传感器、地理位置和生物特征等大量敏感数据所引发的隐私问题，开展了一项初步实证研究。作者选取 390 款真实世界的移动 AR 应用，考察其请求的危险权限、检测到的数据泄露，以及数据安全实践是否公开披露，从而帮助用户了解应用的数据安全性并做出知情安装决策。研究结果以报告形式呈现这些应用在权限请求、数据泄露和数据安全可获取性方面的现状。
With the development of augmented reality (AR) technology, the use of mobile AR applications (MAR apps) is rising rapidly in various aspects of people’s everyday lives, such as games, shopping, and education. When compared to traditional apps, AR apps typically need access to the smartphone’s camera all the time and collect and analyze significantly more data, such as sensor data, geolocation, and biometric information. Due to the sensitivity and volume of data collected by MAR apps, new privacy concerns are raised. In this paper, we describe a preliminary empirical study of Android MAR apps in terms of the sensitive data collected by MAR apps, whether the collected data is well protected, and whether the data practice is publicly available so that users can learn about the data safety and make informed decisions when deciding which apps to install. In this study, we analyzed 390 real-world MAR apps and reported the dangerous permissions they requested, the data leaks detected in them, and the availability of their data safety.
DOI 原文 ·
@inproceedings{paperbot7368,
title = {A Study of User Privacy in Android Mobile AR Apps},
author = {Xiaoyi Yang and Xueling Zhang},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3560512}
}