pp. 579-588
S&M3196 Research Paper of Special Issue https://doi.org/10.18494/SAM4173 Published: February 28, 2023 A Behavior-based Scheme to Block Privacy Leakage on Smartphone Sensors When You Exercise [PDF] Liuqing Yang, Xiaorui Zhang, and Qiuju Wang (Received October 15, 2022; Accepted February 2, 2023) Keywords: behavior-based access control, smartphone sensor, privacy leakage, block, API call monitoring
Smartphone sensors are widely used in the development of fitness, running, workout, or health applications (apps). However, smartphone sensors may increase the risk of privacy leakage when they bring convenience to users. Traditional access control mechanisms, such as Android Permission, cannot prevent authorized malicious apps from abusing sensor resources. In this paper, a novel behavior-based sensor access control scheme is presented. This scheme can further regulate the behavior of an app after it is authorized, so that it can only access sensor resources with secure behavior patterns (SBPs), and sensor-based privacy leakage may thereby be blocked. On the basis of user interface (UI) operation tracking and tagging, this scheme implements the dynamic perception of app sensor access behaviors. With a temporal logic known as temporal logic of causal knowledge (TLCK), we developed a method to construct the secure sensor access behavior pattern. Every sensor may be given a SBP. By comparing the dynamic sensor access behavior of an app with SBP, we can determine if the sensor access is secure. Moreover, by supervising the call stack of the app’s sensor access application programming interface (API), we may timely block a sensor access when it is not secure. In this report, we also describe the implementation of a prototype defense system to analyze the effectiveness and efficiency of the scheme. The experimental results show that this scheme can effectively block the abnormal sensor access of an app with a performance overhead of about 10%.
Corresponding author: Qiuju WangThis work is licensed under a Creative Commons Attribution 4.0 International License. Cite this article Liuqing Yang, Xiaorui Zhang, and Qiuju Wang, A Behavior-based Scheme to Block Privacy Leakage on Smartphone Sensors When You Exercise, Sens. Mater., Vol. 35, No. 2, 2023, p. 579-588. |