Privacy Risk Assessment for SQLite Based Android Applications

Abstract

Managing privacy leakage is of great importance in the Android platform. The variety of new forms of user-privacy fraud reveals a new challenge in terms of predicting potential private data disclosure threats and protecting the privacy of the devices inside our pockets. In this paper, we present an analytical framework, called AppLeak, to effectively evaluate information loss and detect privacy leakage during the runtime of Android applications. Moreover, a rigorous privacy risk assessment procedure is presented in which the potential privacy risk threat associated with the running Android application can be identified. In AppLeak, we adopt new starting points such as individual perception and attack criteria as major analytical principles. With the testing scenarios, we demonstrate that the feasibility and practicability of AppLeak are guaranteed.