一句话：面向 Android 应用数据传输合规性，针对现有检测效率低和忽略物理目的地的问题。
移动应用为满足业务需求常访问个人信息，带来隐私泄露担忧。已有合规检测方法通过检查程序代码与隐私政策之间的一致性来发现违规，但面临静态数据流分析工具效率低的问题，并且往往忽略数据实际传输的物理目的地。本文以“未经通知地提供”为切入点，关注 Android 应用数据传输的合规性评估，试图在代码与隐私政策一致性分析之外纳入物理传输目的地，并应对分析效率挑战。摘要未给出具体技术方案、实现细节与实验评估结果，因此无法进一步概述其方法创新与关键发现。
Mobile apps often access personal information to meet business needs, raising concerns about privacy breaches. Compliance detection methods are proposed to check for inconsistencies between program code and privacy policies. However, existing methods face challenges with the low efficiency of static data flow analysis tools and often neglect physical data transmission destinations.
DOI 原文 ·
@inproceedings{paperbot8365,
title = {Giving without Notifying: Assessing Compliance of Data Transmission in Android Apps},
author = {Ming Fan and Jifei Shi and Yin Wang and Le Yu and Xicheng Zhang and Haijun Wang and Wuxia Jin and Ting Liu},
booktitle = {ASE},
year = {2024},
doi = {10.1145/3691620.3695528}
}