DiOS: Dynamic Privacy Analysis of iOS Applications
Please always quote using this URN: urn:nbn:de:bvb:29-opus4-47559
- We present DiOS, a practical system to perform automated
dynamic privacy analysis of iOS apps. DiOS provides a highly
scalable and fully automated solution to schedule apps from the
official Apple App Store for privacy analysis to iOS
devices. While apps are automatically executed, user interaction is
simulated using random and smart execution strategies, and sensitive API calls
as well as network connections are tracked. We evaluated the system
on 1,136 of the most popular free apps from the iOS App Store and found out that almost 20% of all investigated apps are tracking users' locations on every app start, one third of all accesses to users' address books are attributed to appsWe present DiOS, a practical system to perform automated
dynamic privacy analysis of iOS apps. DiOS provides a highly
scalable and fully automated solution to schedule apps from the
official Apple App Store for privacy analysis to iOS
devices. While apps are automatically executed, user interaction is
simulated using random and smart execution strategies, and sensitive API calls
as well as network connections are tracked. We evaluated the system
on 1,136 of the most popular free apps from the iOS App Store and found out that almost 20% of all investigated apps are tracking users' locations on every app start, one third of all accesses to users' address books are attributed to apps from the social network category and almost half of all apps are tracking users' app usage behavior by incorporating tracking and advertising libraries.…
Author: | Andreas Kurtz, Andreas Weinlein, Christoph Settgast, Felix Freiling |
---|---|
Persistent identifiers - URN: | urn:nbn:de:bvb:29-opus4-47559 |
Series (Volume number): | Technical reports / Department Informatik (CS-2014-03) |
Document Type: | Report |
Language: | English |
Year of publication: | 2014 |
Publishing Institution: | Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU) |
Release Date: | 2014/06/10 |
SWD-Keyword: | Apps; iOS; Privatsphäre; Dynamische Analyse |
Institutes: | Technische Fakultät / Department Informatik |
CCS-Classification: | D. Software |
Dewey Decimal Classification: | 0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 004 Datenverarbeitung; Informatik |
open_access (DINI-Set): | open_access |
Licence (German): | ![]() |