Are Your Requests Your True Needs? Checking Excessive Data Collection in VPA App
Abstract
Virtual personal assistants (VPA) services encompass a large number of third-party applications (or apps) to enrich their functionalities. These apps have been well examined to scrutinize their data collection behaviors against their declared privacy policies. Nonetheless, it is often overlooked that most users tend to ignore privacy policies at the installation time. Dishonest developers thus can exploit this situation by embedding excessive declarations to cover their data collection behaviors during compliance auditing.
BibTeX
@inproceedings{Xie-al:ICSE24,
author = {Fuman Xie and
Chuan Yan and
Mark Huasong Meng and
Shao{-}Ming Teng and
Yanjun Zhang and
Guangdong Bai},
title = {Are Your Requests Your True Needs? Checking Excessive Data Collection in {VPA} App},
booktitle = {ICSE},
pages = {205:1--205:12},
publisher = {{ACM}},
year = {2024},
}