User Comment Analysis for Android apps and CSPI Detection with Comment Expansion
نویسندگان
چکیده
Along with the exponential growth on markets of mobile apps, comes the serious public concern about the security and privacy issues. User comments serves as a valuable source of information for evaluating a mobile app, for both new users and developers. However, for the purpose of evaluation on the security/privacy aspects of an app, user comments are not always directly useful. Most of the comments are about issues like functionality, missing feature or just pure emotional expression. Therefore, further efforts are required in order to identify those Comments with Security/Privacy Issues (CSPI) for future evaluation. In this paper, a dataset of comments is collected from Google Play, and a two dimensional label system is proposed to describe those CSPI within it. A supervised multi-label learning method utilizing comment expansion is adopted to detect different types of CSPI described by this label system. Experiments on the collected dataset shows that the proposed method outperforms the method without the comment expansion.
منابع مشابه
Expanding HTA – Correcting a Misattribution, Clarifying the Scope of HTA and CEA; Comment on “Ethics in HTA: Examining the ‘Need for Expansion’”
Abrishami, Oortwijn, and Hofman (AOH) attribute to me a position I do not hold and an argument I did not make. The purpose of this note is make clear what my position actually is and to clarify the main differences between health technology assessment (HTA) and cost-effectiveness analysis (CEA).
متن کاملPoster: An Efficient Solution for Detecting UI-Mimicking Android Applications
In the Android system, apps are managed by centralized markets, such as Google Play. To eliminate malicious apps, the markets actively check apps using scanners, which perform program analysis to detect malicious logic in apps. Many solutions have been developed to further enhance the accuracy of detection [4], [6], [10]. Meanwhile, malicious apps often deceive users via faked UIs. For example,...
متن کاملStatic Detection of Event-based Races in Android Apps
Event-based races are the predominant source of concurrency errors in Android apps. So far all the approaches for detecting event-based races have been dynamic. Due to their dynamic nature, these approaches suffer from coverage and false negative issues, and despite being dynamic they still have a high rate of false positives. We introduce a static approach and tool, named SIERRA, for detecting...
متن کاملAn Effective Risk Computation Metric for Android Malware Detection
Android has been targeted by malware developers since it has emerged as widest used operating system for smartphones and mobile devices. Android security mainly relies on user decisions regarding to installing applications (apps) by approving their requested permissions. Therefore, a systematic user assistance mechanism for making appropriate decisions can significantly improve the security of ...
متن کاملSUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps
While smartphones and mobile apps have been an essential part of our lives, privacy is a serious concern. Previous mobile privacy related research efforts have largely focused on predefined known sourcesmanaged by smartphones. Sensitive user inputs through UI (User Interface), another information source that may contain a lot of sensitive information, have been mostly neglected. In this paper, ...
متن کامل