Show simple item record

dc.contributor.advisorZhuang, Yanyan
dc.contributor.authorHavey, Wayne
dc.contributor.committeememberBoult, Terrance
dc.contributor.committeememberChang, Sang-Yoon
dc.date.accessioned2020-08-17T10:00:45Z
dc.date.available2020-08-17T10:00:45Z
dc.date.submitted2020-08
dc.descriptionIncludes bibliographical references.
dc.description.abstractAndroid application data leakage remains pervasive, despite advancements in leakage detection and user protections. Previous research includes tools that are computa tionally expensive or that did not distinguish between the types of data that were leaked. For example, a user’s age was considered as privacy-sensitive as their pass words. This thesis introduces PrivSense, a light-weight tool designed to detect privacy related code. PrivSense uses Natural Language Processing techniques to capture the semantic meanings of variables, classes, methods, etc., and determines the private data an app is likely to collect. Further, PrivSense correlates the sensitivity of private information with consumers’ attitudes toward data sensitivity. We analyzed 925 apps across 35 categories, and found apps superfluously collect private consumer data ranging from a social security number and banking information, to medication, fingerprints, and physical location. Some apps are wrongly categorized by the Google Play Store which could cause consumer confusion. False positive and false negative rates of PrivSense are analyzed and presented.
dc.format.mediumborn digital
dc.format.mediummasters theses
dc.identifierHavey_uccs_0892N_10568.pdf
dc.identifier.urihttps://hdl.handle.net/10976/167621
dc.languageEnglish
dc.publisherUniversity of Colorado Colorado Springs. Kraemer Family Library
dc.relation.ispartofTheses
dc.rightsCopyright of the original work is retained by the author.
dc.subjectPrivacy
dc.subjectAndroid
dc.titlePrivSense: Static Analysis for Detecting Privacy-Related Code in Mobile Apps
dc.typeText
dcterms.cdm.subcollectionInformation Assurance
thesis.degree.disciplineCollege of Engineering and Applied Science-Information Assurance
thesis.degree.grantorUniversity of Colorado Colorado Springs
thesis.degree.levelMasters


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record