Differentiated context-aware hook placement for different owners' smartphones
Tian Chen, Wang Ya Zhe, Liu Peng, Dai Rui Rui, Zhou An Yuan, Zhuo Xin, Wang

TL;DR
Prihook is an automated, personalized hook placement system for Android that uses user privacy preferences and machine learning to enhance privacy without significant runtime overhead.
Contribution
It introduces a novel personalized hook placement approach using a user privacy preference table and machine learning to select methods for privacy protection.
Findings
No user privacy violations in tests.
Hooks have small runtime overhead.
Effective personalization of privacy hooks.
Abstract
A hook is a piece of code. It checks user privacy policy before some sensitive operations happen. We propose an automated solution named Prihook for hook placement in the Android Framework. Addressing specific context-aware user privacy concerns, the hook placement in Prihook is personalized. Specifically, we design User Privacy Preference Table (UPPT) to help a user express his privacy concerns. And we leverage machine learning to discover a Potential Method Set (consisting of Sensor Data Access Methods and Sensor Control Methods) from which we can select a particular subset to put hooks. We propose a mapping from words in the UPPT lexicon to methods in the Potential Method Set. With this mapping, Prihook is able to (a) select a specific set of methods; and (b) generate and place hooks automatically. We test Prihook separately on 6 typical UPPTs representing 6 kinds of…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Malware Detection Techniques · Mobile and Web Applications · Interactive and Immersive Displays
