PriGen: Towards Automated Translation of Android Applications' Code to Privacy Captions

Vijayanta Jain,Sanonda Datta Gupta,Sepideh Ghanavati,Sai Teja Peddinti
DOI: https://doi.org/10.48550/arXiv.2305.06509
2023-05-11
Software Engineering
Abstract:Mobile applications are required to give privacy notices to the users when they collect or share personal information. Creating consistent and concise privacy notices can be a challenging task for developers. Previous work has attempted to help developers create privacy notices through a questionnaire or predefined templates. In this paper, we propose a novel approach and a framework, called PriGen, that extends these prior work. PriGen uses static analysis to identify Android applications' code segments which process sensitive information (i.e. permission-requiring code segments) and then leverages a Neural Machine Translation model to translate them into privacy captions. We present the initial evaluation of our translation task for $\sim$300,000 code segments.
What problem does this paper attempt to address?