Associated Risks in Mobile Applications Permissions

• 作者: Abdulaziz Albesher Mohammed Al Jutail Mousa Al-Akhras
• 来源期刊: 信息安全(英文)
• 学科: 医学
• 关键词: Mobile PERMISSION Android PRIVACY ATTACK Security Association APRIORI
• 年，卷（期）: 2019,（2）
• 页码范围: 69-90
• 页数: 22页
• 分类号: R73

摘要

Mobile applications affect user’s privacy based on the granted application’s permissions as attackers exploit mobile application permissions in Android and other mobile operating systems. This research divides permissions based on Google’s classification of dangerous permissions into three groups. The first group contains the permissions that can access user’s private data such as reading call log. The second group contains the permissions that can modify user’s data such as modifying the numbers in contacts. The third group contains the remaining permissions which can track the location, and use the microphone and other sensitive issues that can spy on the user. This research is supported by a study that was conducted on 100 participants in Saudi Arabia to show the level of users’ awareness of associated risks in mobile applications permissions. Associations among the collected data are also analyzed. This research fills the gap in user’s awareness by providing best practices in addition to developing a new mobile application to help users decide whether an application is safe to be installed and used or not. This application is called “Sparrow” and is available in Google Play Store.