一句话:提出多智能体框架 SCOPE,自动评估移动应用权限说明合规性并生成优化建议,提升隐私透明度。
移动应用权限请求常附带说明文本,但缺乏系统评估机制,难以满足隐私透明度与知情同意要求。作者对 600 款主流应用进行实证研究,发现 15% 权限请求无说明,其余存在表述模糊、术语晦涩、未披露第三方 SDK 数据访问等问题。为此提出 SCOPE:一个自动化多智能体框架,结合多模态 LLM 说明抽取、少样本语言分析、基于动态 API 的用途推断和自适应报告生成,系统评估合规性并给出优化建议。评估显示说明抽取准确率 98%、合规分析一致性 93.5%、用途推断准确率 92%;30 人用户研究中 84.6% 偏好 SCOPE 优化后的说明。
Permission explanations, explanatory text accompanying mobile app permission requests, are crucial for user privacy transparency and informed consent. Despite their importance, current practices often fall short of regulatory expectations due to the lack of systematic evaluation mechanisms. Through an empirical study of 600 mainstream mobile apps, we reveal widespread deficiencies: 15% of permission requests provide no explanation, others use vague language or technical jargon, and critically, many fail to disclose third-party SDK data access despite these components actively using granted permissions. To address these transparency gaps, we present SCOPE, an automated multi-agent framework that systematically evaluates permission explanation compliance and generates targeted optimization recommendations. SCOPE employs four specialized agents working collaboratively: multimodal LLM-based explanation extraction, few-shot learning-based linguistic analysis, dynamic API-based purpose inference, and adaptive report generation. Comprehensive evaluation demonstrates SCOPE’s effectiveness, achieving 98% accuracy in explanation extraction, 93.5% consistency in compliance analysis, and 92% accuracy in purpose inference. A user study with 30 participants shows 84.6% preference for SCOPE-optimized explanations, confirming practical utility. Our work provides the first systematic analysis of permission explanation practices and establishes a scalable solution for enhancing mobile app privacy transparency.
DOI 原文 ·
@inproceedings{paperbot9330,
title = {SCOPE: Evaluating and Enhancing Permission Explanation Transparency in Mobile Apps},
author = {Liu Wang and Tianshu Zhou and Haoyu Wang and Xiyuan Liu and Yi Wang},
booktitle = {ASE},
year = {2025},
doi = {10.1109/ase63991.2025.00302}
}