Request For Research Presentations For the PrivacyCon Conference #00013

Submission Number:
00013
Commenter:
Serge Egelman
State:
California
Initiative Name:
Request For Research Presentations For the PrivacyCon Conference
Please find attached a recent research paper wherein we describe our instrumentation of the Android platform to examine how applications access sensitive data during everyday usage. We observed that sensitive data is accessed on average >5,000 times per user per day, and that the vast majority of the time it occurs without the user's knowledge and against expectations. We further discuss how our results can be used to design platforms that account for context when determining whether or not to grant third-party applications access to sensitive data. This work was completed in February of 2015 and presented at the 2015 USENIX Security Symposium. Serge Egelman is reachable at 434.227.1337 or egelman@cs.berkeley.edu