Abstract:Abuse of zero-permission sensors on-board mobile and wearable devices to infer users' personal context and information is a well-known privacy threat that has received significant attention. Efforts towards protection mechanisms that prevent or limit the success of such threats, however, have been ad-hoc so far and have primarily focused on designing threat-specific customized defense mechanisms. Such approaches are not very practical, as evident from their limited adoption within major mobile/wearable operating systems. In the end, it is clear that all privacy threats that take advantage of unrestricted access to zero-permission sensors can be prevented if access to these sensors is regulated. However, due to the dynamic nature of sensor usage and requirements of different mobile applications, design of such access control mechanisms is not trivial. To effectively design an automated mobile defense mechanism that can dynamically measure the threat level of different sensor access requests from different applications and appropriately block suspicious requests, the problem of zero-permission sensor access needs to be first formally defined and analyzed. This paper accomplishes the above objective by employing game theory, specifically, signaling games, to analytically model the sensor access scenario for mobile applications, including, formalizing sensor access strategies of mobile applications and defense strategies of the on-board defense mechanism and the associated costs and benefits. Within the confines of a formal and practical game model, the paper then outlines conditions under which equilibria can be achieved between entities (applications and defense mechanism) with conflicting goals. The game model is further analyzed using numerical simulations, and also extended in the form of a repeated signaling game.

The Application of Game Theory in Mobile Social Media Security Analysis for Companies

Information Security Problem Research Based on Game Theory

Assessment of Information Security Impacts on Mobile Social Media

Game Theory for Mobile Location Privacy

Application of game theory in network security situation awareness

Review of Application and Analysis Techniques for Mobile System Security

A Survey Of Game Theoretic Methods For Cyber Security

Analyzing Defense Strategies Against Mobile Information Leakages: A Game-Theoretic Approach

Security Issues in Online Social Networks

Mobile application security: malware threats and defenses

Game Theory and Information Security

Game Theory Meets Network Security: A Tutorial at ACM CCS

Security Analysis of Mobile Device-to-Device Network Applications

Cyber Security In Mobile Apps And User CIA

A Survey of Game Theory As Applied to Social Networks

A Game Theoretical Attack-Defense Model Oriented to Network Security Risk Assessment

Game Theory Analysis for Message Dropping Attacks Prevention Strategy in Mobile P2P Live Streaming System

An Extended Technology Acceptance Model for Mobile Social Gaming Service Popularity Analysis.

Security Analytics for Mobile Apps:Achievements and Challenges

Research on Security Technology of Mobile Network in Software Architecture

Privacy Protection: A Community-Structured Evolutionary Game Approach