AppChk众包平台:iOS应用程序与哪些第三方对话?
The AppChk Crowd-Sourcing Platform: Which third parties are iOS apps talking to?
摘要:
在本文中,我们提出了一个平台,这是可用的新手用户没有领域知识的专家。该平台包括一个iOS应用程序来监控网络流量和一个网站来评估结果。监控在设备上进行;不需要外部服务器。用户可以记录和共享网络活动、比较评估结果以及在应用程序和应用程序组上创建排名。结果用于检测新的跟踪器,指出隐私实践中的不当行为,或自动比较价格,地区和类别等应用属性。为了展示潜在的用例,我们比较了iOS 14发布前后的75个应用程序,并表明我们可以检测应用程序特定行为随时间变化的趋势,例如,通过操作系统中的隐私变化。我们确定了七个新的跟踪器,这些跟踪器不存在于当前的跟踪列表中,例如EasyList。游戏类别特别容易被跟踪(占流量的53%),平均每分钟有36.2个域和59.3个请求。
英文摘要:
In this paper we present a platform which is usable by novice users without domain knowledge of experts. The platform consisting of an iOS app to monitor network traffic and a website to evaluate the results. Monitoring takes place on-device; no external server is required. Users can record and share network activity, compare evaluation results, and create rankings on apps and app-groups. The results are used to detect new trackers, point out misconduct in privacy practices, or automate comparisons on app-attributes like price, region, and category. To demonstrate potential use cases, we compare 75 apps before and after the iOS 14 release and show that we can detect trends in app-specific behavior change over time, for example, by privacy changes in the OS. Our results indicate a slight decrease in tracking but also an increase in contacted domains. We identify seven new trackers which are not present in current tracking lists such as EasyList. The games category is particularly prone to tracking (53% of the traffic) and contacts on average 36.2 domains with 59.3 requests per minute.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。