A privacy leakage risk assessment method and device

Abstract

The embodiment of the invention provides a privacy leakage risk assessment method and device. The condition that the service provider of the third party acquires the privacy information under the condition that the user is not informed is mainly considered. A user permission setting sample is collected and analyzed. The sensitivity of privacy information of authority management is quantified. Theassociation relationship between the authority and the privacy is clearer. Therefore, a personalized authority management scheme can be customized for the user better and more accurately; quantifyingthe sensitivity of the permission based on the difference between the malicious application set and the normal application set; and the non-linear influence of the permission combination on privacy leakage is mainly considered, the service quality and the privacy protection effect are balanced, and a system overall permission management scheme capable of reducing the privacy information leakage risk can be provided for the user while the high service quality is ensured.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of privacy risk assessment, and more specifically, to a privacy leakage risk assessment method and device. Background technique [0002] With the rapid popularization of information services and the development of mobile Internet-related technologies, the use of smart terminals has penetrated into people's daily lives. While enjoying the convenient services brought by smart terminals, users also bear the increasingly serious risk of privacy information leakage. At present, the permission management mechanism used by smart terminal operating systems (such as Android, iOS, etc.) controls access permissions in units of applications, and only applications that have obtained corresponding permissions can read user privacy data. Due to the excessive application of permissions by many applications in smart terminals, user privacy information leakage incidents occur frequently. For the ex...

AI Technical Summary

Problems solved by technology

Since the operating system does not prompt the user whether the host application or a third party is applying for permission, the user cannot know whether granting the permission will cause leakage of private information, and the existing methods cannot solve these problems, and cannot guarantee higher service quality. Provide users with a permission configuration scheme that reduces the risk of privacy information leakage while maintaining quality

Images