UserCentric Mobile Security Assessment.pdf

POSTER: User-Centric Mobile Security Assessment

PRESENTER: DENGFENG LI, University of Illinois Urbana-Champaign

ABSTRACT:
A variety of valuable mobile utility apps heavily rely on collecting a user's app usage data to carry out their promised utilities and enhance user experiences. A part of such app usage data often contains security-sensitive information. Thus, an important and challenging issue arises: how to balance between the user's privacy and the utility app's utility functionality. Towards addressing the issue, we propose a new privacy framework that combines techniques of runtime sensitive-information detection, utility- impact analysis, privacy-policy compliance checking, and balanced data anonymization to enable a third-party app to determine what original values to keep in sanitized data in order to deliver a desirable level of utility efficacy.

CO-PRESENTER(S):

KEYWORDS: 
Mobile Security, User assistance

PRESENTER BIO:
Dengfeng Li is currently pursuing a Master's degree in the Department of Computer Science at UIUC. He is a member of Automated Software Engineering Research Group advised by Prof.Tao Xie. His research interests are in software engineering, focusing on software testing, program analysis and software security. He is eager to transform his knowledge into practice. He participated as a software intern with WeChat, researching new mythologies for testing industrial mobile app. He also visited company of KiKa Keyboad, a keyboard app with 20 million active users each day and proposed a new user's privacy protection framework for utility apps. This summer, he is participating research internship with Fujitsu Laboratories of America. Prior to that, he received both his B.S. in Computer Science and B.S. in Electrical Engineering from Pennsylvania State University in 2015.