A unified model for detecting privacy leakage on android

Abstract

Since Android application may leak user’s private information, the issue of Android privacy leakage has rasied significant concerns. Various approaches are proposed to detect privacy leakage with different indicators to determine privacy leaks. In this paper, we propose a unified security model to determine privacy leakage. Our unified model includes three typical indicators for detecting privacy leaks, which are sensitive transmission, user intention and application behavior. The proposed model formalizes privacy leakage behavior based on information flows and state transitions. We identify three typical frameworks of privacy leakage. By analyzing the security model, it is feasible to use our model to implement three typical frameworks.