Short paper
Jiaqi Tana b, Utsav Droliaa b, Rolando Martinsa b, Rajeev Gandhia b, Priya Narasimhana b
- aCarnegie Mellon University, Pittsburgh, PA, USA
- bCarnegie-Mellon University, Pittsburgh, Pa., USA#TAB#
Papers open inside SciRah from the original publisher or repository; SciRah never hosts them.
Abstract
The Android permissions system provides all-or-nothing access to users' photos stored on smartphones, and the permissions which control access to stored photos can be confusing to the average user. Our analysis found that 73% of the top 250 free apps on the Google Play store have permissions that may not reflect their ability to access stored photos. We propose CHIPS, a unique content-based fine-grained run-time access control system for stored photos for Android which requires minimal user assistance, runs entirely locally, and provides low-level enforcement. CHIPS can recognize faces with minimal user training to deny apps access to photos with known faces. CHIPS's privacy identification has low overheads as privacy checks are cached, and is accurate, with false-positive and false-negative rates of less than 8%.
TL;DRCHIPS is proposed, a unique content-based fine-grained run-time access control system for stored photos for Android which requires minimal user assistance, runs entirely locally, and provides low-level enforcement. (Semantic Scholar)