言出必行：程序代码中数据惯例与小程序隐私政策的一致性检测
Do as You Say: Consistency Detection of Data Practice in Program Code and Privacy Policy in Mini-App
摘要：
迷你应用程序是一种新兴的移动应用程序形式，它将Web技术与本地功能相结合。其特点，例如，无需下载，无需安装，迅速流行起来。然而，违反法律或法规的隐私问题正在迅速扩大的迷你应用生态系统中滋生。迷你应用程序对程序代码中的数据所做的事情与它在隐私策略描述中声明的内容之间的一致性非常重要。但此前还没有研究对小程序的隐私问题进行系统的调查。在本文中，据我们所知，我们是第一个对迷你应用程序中的数据实践和策略描述进行合规性检测的人。本文首先针对小程序中JavaScript语言的特点，定制了一种基于数据实体依赖网络的污点分析方法。然后，将数据类型和数据操作转化为程序代码和隐私策略中的数据实践，从而完成细粒度的一致性匹配模型。我们在微信客户端上抓取了10万个小程序，并提取了2,998个带有隐私策略的小程序。其中，符合一致性要求的仅有318家，不一致的有2,680家，不一致比例高达89.4%。迷你应用程序的不一致性非常严重。基于6个真实案例的分析，为了降低这种潜在的数据泄露风险，我们建议开发者减少无关信息的收集和模板的直接使用，平台应提供数据流检测工具和隐私策略编写支持。
英文摘要：
Mini-app is an emerging form of mobile application that combines web technology with native capabilities. Its features, e.g., no need to download and no installation, have made it popular rapidly. However, privacy issues that violate the laws or regulations are breeding in the swiftly expanding mini-app ecosystem. The consistency between what the mini-app does about the data in the program code and what it declares in its privacy policy description is important. But no work has systematically investigated the privacy problem of the mini-app before. In this paper, to our best knowledge, we are the first to conduct the compliance detection of data practice and policy description in mini-apps. In this paper, we first customize a taint analysis method based on data entity dependency network to adapt to the characteristics of the JavaScript language in the mini-apps. Then, we transform data types and data operations to data practices in program codes and privacy policies, so as to finish a fine-grained consistency matching model.We crawl 100,000 mini-apps on WeChat client in the wild and extract 2,998 with a privacy policy. Among them, only 318 meet the consistency requirements, 2,680 are inconsistent, and the proportion of inconsistencies is as high as 89.4%. The inconsistency in the mini-app is very serious. Based on 6 real-world cases analyzed, in order to reduce this potential data leakage risk, we suggest that the developer should reduce the collection of irrelevant information and the straightforward use of templates, and the platform should provide data flow detection tools and privacy policy writing support.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
