Is It a Trap? A Large-scale Empirical Study And Comprehensive Assessment of Online Automated Privacy Policy Generators for Mobile Apps

被引：0
|
作者：
Pan, Shidong [1 ,2 ,3 ,4 ]
Zhang, Dawen [1 ,2 ]
Staples, Mark [1 ]
Xing, Zhenchang [1 ,2 ]
Chen, Jieshan [1 ]
Xu, Xiwei [1 ]
Thong Hoang [1 ,4 ]
机构：
[1] CSIRO, Data61, Eveleigh, Australia
[2] Australian Natl Univ, Canberra, ACT, Australia
[3] Australian Natl Univ, Sch Comp, Canberra, ACT, Australia
[4] CSIRO, Data61, Software Syst Res Grp, Eveleigh, Australia
来源：
PROCEEDINGS OF THE 33RD USENIX SECURITY SYMPOSIUM, SECURITY 2024 | 2024年
关键词：
D O I：
暂无
中图分类号：
学科分类号：
摘要：
Privacy regulations protect and promote the privacy of individuals by requiring mobile apps to provide a privacy policy that explains what personal information is collected and how these apps process this information. However, developers often do not have sufficient legal knowledge to create such privacy policies. Online Automated Privacy Policy Generators (APPGs) can create privacy policies, but their quality and other characteristics can vary. In this paper, we conduct the first large-scale empirical study and comprehensive assessment of APPGs for mobile apps. Specifically, we scrutinize 10 APPGs on multiple dimensions. We further perform the market penetration analysis by collecting 46,472 Android app privacy policies from Google Play, discovering that nearly 20.1% of privacy policies could be generated by existing APPGs. Lastly, we point out that generated policies in our study do not fully comply with GDPR, CCPA, or LGPD. In summary, app developers must carefully select and use the appropriate APPGs with careful consideration to avoid potential pitfalls.
引用
收藏
页码：5681 / 5698
页数：18
相关论文
共 46 条
  • [1] A Large-Scale Empirical Study on Software Reuse in Mobile Apps
    Mojica, Israel J.
    Adams, Bram
    Nagappan, Meiyappan
    Dienst, Steffen
    Berger, Thorsten
    Hassan, Ahmed E.
    IEEE SOFTWARE, 2014, 31 (02) : 78 - 86
  • [2] Testing of Mobile Applications in the Wild: A Large-Scale Empirical Study on Android Apps
    Pecorelli, Fabiano
    Catolino, Gemma
    Ferrucci, Filomena
    De Lucia, Andrea
    Palomba, Fabio
    2020 IEEE/ACM 28TH INTERNATIONAL CONFERENCE ON PROGRAM COMPREHENSION, ICPC, 2020, : 296 - 307
  • [3] A Large-Scale Empirical Study on Industrial Fake Apps
    Tang, Chongbin
    Chen, Sen
    Fan, Lingling
    Xu, Lihua
    Liu, Yang
    Tang, Zhushou
    Dou, Liang
    2019 IEEE/ACM 41ST INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING: SOFTWARE ENGINEERING IN PRACTICE (ICSE-SEIP 2019), 2019, : 183 - 192
  • [4] Exploiting Proximity-Based Mobile Apps for Large-Scale Location Privacy Probing
    Zhao, Shuang
    Luo, Xiapu
    Ma, Xiaobo
    Bai, Bo
    Zhao, Yankang
    Zou, Wei
    Yang, Zeming
    Au, Man Ho
    Qiu, Xinliang
    SECURITY AND COMMUNICATION NETWORKS, 2018,
  • [5] Large-scale Characterization of Comprehensive Online Video Service in Mobile Network
    Li, Chenyu
    Liu, Jun
    2016 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC), 2016,
  • [6] A Large-Scale Empirical Study of Internet Users' Privacy Leakage in China
    Zhang, Yuanming
    Zhang, Shuo
    Zhang, Yuchao
    Tao, Jing
    Wang, Pinghui
    IEEE 17TH INT CONF ON DEPENDABLE, AUTONOM AND SECURE COMP / IEEE 17TH INT CONF ON PERVAS INTELLIGENCE AND COMP / IEEE 5TH INT CONF ON CLOUD AND BIG DATA COMP / IEEE 4TH CYBER SCIENCE AND TECHNOLOGY CONGRESS (DASC/PICOM/CBDCOM/CYBERSCITECH), 2019, : 406 - 411
  • [7] Photo Privacy Conflicts in Social Media: A Large-scale Empirical Study
    Such, Jose M.
    Porter, Joel
    Preibusch, Soren
    Joinson, Adam
    PROCEEDINGS OF THE 2017 ACM SIGCHI CONFERENCE ON HUMAN FACTORS IN COMPUTING SYSTEMS (CHI'17), 2017, : 3821 - 3832
  • [8] UNITI Mobile-EMI-Apps for a Large-Scale European Study on Tinnitus
    Vogel, Carsten
    Schobel, Johannes
    Schlee, Winfried
    Engelke, Milena
    Pryss, Rudiger
    2021 43RD ANNUAL INTERNATIONAL CONFERENCE OF THE IEEE ENGINEERING IN MEDICINE & BIOLOGY SOCIETY (EMBC), 2021, : 2358 - 2362
  • [9] Why are Android Apps Removed From Google Play? A Large-scale Empirical Study
    Wang, Haoyu
    Li, Hao
    Li, Li
    Guo, Yao
    Xu, Guoai
    2018 IEEE/ACM 15TH INTERNATIONAL CONFERENCE ON MINING SOFTWARE REPOSITORIES (MSR), 2018, : 231 - 242
  • [10] Test Automation in Open-Source Android Apps: A Large-Scale Empirical Study
    Lin, Jun-Wei
    Salehnamadi, Navid
    Malek, Sam
    2020 35TH IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMATED SOFTWARE ENGINEERING (ASE 2020), 2020, : 1078 - 1089
12345