一句话:通过开发者调研与最新应用日志实证分析,填补 Android 日志隐私泄露漏洞研究的空白。
Android 是最流行的移动操作系统,但其应用日志记录的运行时信息在隐私泄露漏洞研究中常被忽视。现有 Android 应用隐私泄露研究主要集中于静态与动态分析,缺乏专门针对应用日志中隐私泄露漏洞的综合性研究。本文提出开展一项综合研究以填补这一空白,研究包含两方面:(1)收集真实开发者对 Android 应用日志中隐私泄露漏洞的看法;(2)探索最新 Android 应用日志中隐私泄露漏洞的现状。初步结果表明该研究具有潜力。该工作属于安全与隐私方向,强调从开发者视角和真实应用状态两个维度理解日志带来的隐私风险。
Android is the most popular mobile operating system, which attracts countless users. However, Android app logs, which record Android runtime information, are often overlooked in privacy leakage vulnerability research. Existing studies on privacy leakage vulnerabilities in Android apps primarily focus on static and dynamic analysis, with a lack of comprehensive studies specifically addressing privacy leakage vulnerabilities in Android app logs. In this paper, we propose to conduct a comprehensive study to fill this research gap. Our study includes two aspects: (1) gathering real-world developers’ views on privacy leakage vulnerabilities in Android app logs and (2) exploring the status of privacy leakage vulnerabilities in the latest Android app logs. Our preliminary results indicate the potential of this study.CCS CONCEPTS• Security and privacy → Software security engineering.