CUPA: A Configurable User Privacy Approach for Android Mobile Application

Zainab Alkindi, Mohamed Sarrab, Nasser Alzidi

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Citation (Scopus)

Abstract

Mobile applications can collect large private user data including user bank details, contact numbers, photos, saved locations, etc. This poses privacy concerns on many users while using mobile applications. In Android 6.0 and above, users can control apps permissions, where the system allows users to grant and block the dangerous apps permissions at any time. However, there are additional permissions used by the apps (normal permissions) that cannot be controlled by users, which may eventually lead to many privacy violations. In this paper, we present a new approach (CUPA) that provides users with the ability to control applications' access to Android system resources and private data based on user-defined policies. This approach allows users to reduce the level of privacy violation by providing them with some options that are not available in the Android permission system during the installation and run-Time of Android apps. The proposed approach enables users to control the behavior of the apps, including the app network connections, permissions list, and app to app communication. The proposed approach consists of three main components that can check the app behaviors during the installation and run-Time, provide the users with resources and data filtration and allow users to take appropriate actions to control the leakage of the application.

Original languageEnglish
Title of host publicationProceedings - 2020 7th IEEE International Conference on Cyber Security and Cloud Computing and 2020 6th IEEE International Conference on Edge Computing and Scalable Cloud, CSCloud-EdgeCom 2020
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages216-221
Number of pages6
ISBN (Electronic)9781728165509
DOIs
Publication statusPublished - Aug 2020
Externally publishedYes
Event7th IEEE International Conference on Cyber Security and Cloud Computing and 6th IEEE International Conference on Edge Computing and Scalable Cloud, CSCloud-EdgeCom 2020 - New York, United States
Duration: Aug 1 2020Aug 3 2020

Publication series

NameProceedings - 2020 7th IEEE International Conference on Cyber Security and Cloud Computing and 2020 6th IEEE International Conference on Edge Computing and Scalable Cloud, CSCloud-EdgeCom 2020

Conference

Conference7th IEEE International Conference on Cyber Security and Cloud Computing and 6th IEEE International Conference on Edge Computing and Scalable Cloud, CSCloud-EdgeCom 2020
Country/TerritoryUnited States
CityNew York
Period8/1/208/3/20

Keywords

  • Android
  • Mobile App
  • Permissions
  • Security
  • User Privacy

ASJC Scopus subject areas

  • Safety, Risk, Reliability and Quality
  • Computer Networks and Communications
  • Information Systems and Management

Cite this