bind your phone number with caution: automated user profiling through address book matching on smartphone
文献类型:会议论文
作者 | Cheng Yao ; Ying Lingyun ; Jiao Sibei ; Su Purui ; Feng Dengguo |
出版日期 | 2013 |
会议名称 | 8th ACM SIGSAC Symposium on Information, Computer and Communications Security, ASIA CCS 2013 |
会议日期 | May 8, 2013 - May 10, 2013 |
会议地点 | Hangzhou, China |
关键词 | Data privacy Signal encoding Smartphones |
页码 | 335-340 |
中文摘要 | Due to the cost-efficient communicating manner and attractive user experience, messenger applications have dominated every smartphone in recent years. Nowadays, Address Book Matching, a new feature that helps people keep in touch with real world contacts, has been loaded in many popular messenger applications, which unfortunately as well brings severe privacy issues to users. In this paper, we propose a novel method to abuse such feature to automatically collect user profiles. This method can be applied to any application equipped with Address Book Matching independent of mobile platforms. We also build a prototype on Android to verify the effectiveness of our method. Moreover, we integrate profiles gathered from different messenger applications and provide insights by performing a consistency and authenticity analysis on user profile fields. As our experiments show, the abuse of Address Book Matching can cause severe user privacy leakage. Finally, we provide some countermeasures for developers to avoid this issue when designing messenger applications. © 2013 ACM. |
英文摘要 | Due to the cost-efficient communicating manner and attractive user experience, messenger applications have dominated every smartphone in recent years. Nowadays, Address Book Matching, a new feature that helps people keep in touch with real world contacts, has been loaded in many popular messenger applications, which unfortunately as well brings severe privacy issues to users. In this paper, we propose a novel method to abuse such feature to automatically collect user profiles. This method can be applied to any application equipped with Address Book Matching independent of mobile platforms. We also build a prototype on Android to verify the effectiveness of our method. Moreover, we integrate profiles gathered from different messenger applications and provide insights by performing a consistency and authenticity analysis on user profile fields. As our experiments show, the abuse of Address Book Matching can cause severe user privacy leakage. Finally, we provide some countermeasures for developers to avoid this issue when designing messenger applications. © 2013 ACM. |
收录类别 | EI |
会议主办者 | ACM SIGSAC; Hangzhou Normal University; Shanghai Jiaotong University |
会议录 | ASIA CCS 2013 - Proceedings of the 8th ACM SIGSAC Symposium on Information, Computer and Communications Security
![]() |
语种 | 英语 |
ISBN号 | 9781450317672 |
源URL | [http://ir.iscas.ac.cn/handle/311060/15978] ![]() |
专题 | 软件研究所_软件所图书馆_会议论文 |
推荐引用方式 GB/T 7714 | Cheng Yao,Ying Lingyun,Jiao Sibei,et al. bind your phone number with caution: automated user profiling through address book matching on smartphone[C]. 见:8th ACM SIGSAC Symposium on Information, Computer and Communications Security, ASIA CCS 2013. Hangzhou, China. May 8, 2013 - May 10, 2013. |
入库方式: OAI收割
来源:软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。