MOBILESoft 2023
Mon 15 - Tue 16 May 2023 Melbourne, Australia
co-located with ICSE 2023
Tue 16 May 2023 13:45 - 14:00 at Meeting Room 111 - Session 7

Mobile devices are pervasively used for a variety of tasks, including the processing of sensitive data in mobile apps. While in most cases access to this data is legitimate, malware often targets sensitive data and even benign apps collect more data than necessary for their task. Therefore, researchers have proposed several frameworks to detect and track the use of sensitive data in apps, so as to disclose and prevent unauthorized access and data leakage. Unfortunately, a review of the literature reveals a lack of consensus on what sensitive data is in the context of technical frameworks like Android. Authors either provide an intuitive definition or an ad-hoc definition, derive their definition from the Android permission model, or rely on previous research papers which do or do not give a definition of sensitive data. In this paper, we provide an overview of existing definitions of sensitive data in literature and legal frameworks. We further provide a sound definition of sensitive data derived from the definition of personal data of several legal frameworks. To help the scientific community further advance in this field, we publicly provide a list of sensitive sources from the Android framework, thus starting a community project leading to a complete list of sensitive API methods across different frameworks and programming languages.

Tue 16 May

Displayed time zone: Hobart change

13:45 - 15:15
Sensitive and Personal Data: What Exactly Are You Talking About?
NIER (Novel Ideas and Emerging Results)
Maria Kober , Jordan Samhi University of Luxembourg, Steven Arzt Fraunhofer SIT; ATHENE, Tegawendé F. Bissyandé SnT, University of Luxembourg, Jacques Klein University of Luxembourg
Leaders Forum Talk - UX is the differential. What can we do as Software Engineers?
Research Track
Tayana Conte Universidade Federal do Amazonas
Rising Star - Mining User Interfaces to Support Software Development for Mobile Apps
Research Track
Kevin Moran George Mason University
Research Track