TY - GEN
T1 - Uranine
T2 - 11th International Conference Security and Privacy in Communication Networks, SecureComm 2015
AU - Rastogi, Vaibhav
AU - Qu, Zhengyang
AU - McClurg, Jedidiah
AU - Cao, Yinzhi
AU - Chen, Yan
N1 - Publisher Copyright:
© Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2015.
PY - 2015
Y1 - 2015
N2 - Mobile devices are becoming increasingly popular. One reason for their popularity is the availability of a wide range of third-party applications, which enrich the environment and increase usability. There are however privacy concerns centered around these applications – users do not know what private data is leaked by the applications. Previous works to detect privacy leakages are either not accurate enough or require operating system changes, which may not be possible due to users’ lack of skills or locked devices. We present Uranine (Uranine is a dye, which finds applications as a flow tracer in medicine and environmental studies.), a system that instruments Android applications to detect privacy leakages in real-time. Uranine does not require any platform modification nor does it need the application source code. We designed several mechanisms to overcome the challenges of tracking information flow across framework code, handling callback functions, and expressing all information-flow tracking at the bytecode level. Our evaluation of Uranine shows that it is accurate at detecting privacy leaks and has acceptable performance overhead.
AB - Mobile devices are becoming increasingly popular. One reason for their popularity is the availability of a wide range of third-party applications, which enrich the environment and increase usability. There are however privacy concerns centered around these applications – users do not know what private data is leaked by the applications. Previous works to detect privacy leakages are either not accurate enough or require operating system changes, which may not be possible due to users’ lack of skills or locked devices. We present Uranine (Uranine is a dye, which finds applications as a flow tracer in medicine and environmental studies.), a system that instruments Android applications to detect privacy leakages in real-time. Uranine does not require any platform modification nor does it need the application source code. We designed several mechanisms to overcome the challenges of tracking information flow across framework code, handling callback functions, and expressing all information-flow tracking at the bytecode level. Our evaluation of Uranine shows that it is accurate at detecting privacy leaks and has acceptable performance overhead.
UR - http://www.scopus.com/inward/record.url?scp=84958034501&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84958034501&partnerID=8YFLogxK
U2 - 10.1007/978-3-319-28865-9_14
DO - 10.1007/978-3-319-28865-9_14
M3 - Conference contribution
AN - SCOPUS:84958034501
SN - 9783319288642
T3 - Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
SP - 256
EP - 276
BT - Security and Privacy in Communication Networks - 11th International Conference, SecureComm 2015, Revised Selected Papers
A2 - Thuraisingham, Bhavani
A2 - Wang, XiaoFeng
A2 - Yegneswaran, Vinod
PB - Springer Verlag
Y2 - 26 October 2015 through 29 October 2015
ER -