一句话：基于 83 个 Android 应用的 6.7 万余条日志记录，揭示日志隐私泄露的普遍性及开发者认知差距。
Android 应用在运行期产生大量软件日志，用于记录行为、状态与错误信息，但这些日志也可能在开发者无意识的情况下捕获敏感信息与用户隐私数据。本文针对该问题展开实证研究，构建了一个包含 83 个 Android 应用、共 67,702 条日志记录的数据集，并对其中存在的隐私泄露实例进行识别与特征分析。分析共发现 610 个隐私泄露实例，表明此类问题在 Android 应用日志中相当普遍。研究进一步刻画了暴露敏感信息的 Android 应用日志所具备的特征，并揭示出开发者的隐私保护意识与真实场景中的隐私泄露之间存在明显差距，说明仅依赖开发者自觉难以有效防止日志中的隐私外泄。
Android phones are among the most popular mobile devices today, providing users with a wide array of convenient services through various apps. These apps generate software logs during their run-time, which record their behavior, status, and error information. However, these logs can also inadvertently capture sensitive information and user privacy data, often without the developer’s awareness. In this study, we constructed a dataset comprising 67,702 log records from 83 Android apps. Our analysis of this dataset identified 610 instances of privacy leakage, which indicates the prevalence of such issues in Android app logs. Additionally, our analysis identified characteristics of Android app logs with exposed sensitive information and revealed a gap between developers’ awareness of privacy protection and privacy leakage in real-world scenarios.CCS Concepts• Security and privacy → Software security engineering
@inproceedings{ChenDP0ZS24,
title = {From Logging to Leakage: A Study of Privacy Leakage in Android App Logs},
author = {Zhiyuan Chen and Soham Sanjay Deo and Poorna Chander Reddy Puttaparthi and Yiming Tang and Xueling Zhang and Weiyi Shang},
booktitle = {ASE},
year = {2024},
doi = {10.1145/3691620.3695340}
}