Hobson’s choice : security and privacy permissions in Android and iOS devices

Hegarty, R; Hughes-Roberts, T; Haggerty, J

Abstract

The use of smartphones and tablet devices has grown rapidly over recent years and the widespread availability of software, often from unknown developers, has led to security and privacy concerns. In order to prevent security compromises, these devices use access control as a means by which a user is able to specify an application’s ability to interact with services and data. However, the use of access control as a security countermeasure in this environment is severely limited. For example, once permissions are granted to software, they may share data, such as location or unique identifiers with third persons without informing the user, whether or not the application is itself running. This paper presents the results of a comparative study conducted with computing students at two UK universities that identifies the issues surrounding software access control permissions in An-droid and iOS operating systems. Through this study, we are able to quantify the impact of security access permissions on mobile device security and privacy, even amongst specialist users.

Citation

Hegarty, R., Hughes-Roberts, T., & Haggerty, J. (2015, August). Hobson’s choice : security and privacy permissions in Android and iOS devices. Presented at HCI International 2015, Los Angeles, USA

• Presentation Conference Type: Other
• Conference Name: HCI International 2015
• Conference Location: Los Angeles, USA
• Start Date: Aug 2, 2015
• End Date: Aug 7, 2015
• Online Publication Date: Jul 21, 2015
• Publication Date: Jul 21, 2015
• Deposit Date: Feb 3, 2020
• Series Title: Lecture Notes in Computer Science
• Series Number: 9190
• Book Title: Human Aspects of Information Security, Privacy, and Trust : Third International Conference, HAS 2015, Held as Part of HCI International 2015, Los Angeles, CA, USA, August 2-7, 2015. Proceedings
• ISBN: 9783319203751;-9783319203768
• DOI: https://doi.org/10.1007/978-3-319-20376-8_45
• Publisher URL: https://doi.org/10.1007/978-3-319-20376-8_45
• Related Public URLs: https://link.springer.com/book/10.1007/978-3-319-20376-8
• Additional Information: Event Type : Conference