Log In Sign Up

Privacy-Preserving Script Sharing in GUI-based Programming-by-Demonstration Systems

by   Toby Jia-Jun Li, et al.

An important concern in end user development (EUD) is accidentally embedding personal information in program artifacts when sharing them. This issue is particularly important in GUI-based programming-by-demonstration (PBD) systems due to the lack of direct developer control of script contents. Prior studies reported that these privacy concerns were the main barrier to script sharing in EUD. We present a new approach that can identify and obfuscate the potential personal information in GUI-based PBD scripts based on the uniqueness of information entries with respect to the corresponding app GUI context. Compared with the prior approaches, ours supports broader types of personal information beyond explicitly pre-specified ones, requires minimal user effort, addresses the threat of re-identification attacks, and can work with third-party apps from any task domain. Our approach also recovers obfuscated fields locally on the script consumer's side to preserve the shared scripts' transparency, readability, robustness, and generalizability. Our evaluation shows that our approach (1) accurately identifies the potential personal information in scripts across different apps in diverse task domains; (2) allows end-user developers to feel comfortable sharing their own scripts; and (3) enables script consumers to understand the operation of shared scripts despite the obfuscated fields.


page 2

page 6

page 7

page 13


Annotating Privacy Policies in the Sharing Economy

Applications (apps) of the Digital Sharing Economy (DSE), such as Uber, ...

Beware of the Ostrich Policy: End-Users' Perceptions Towards Data Transparency and Control

End users' awareness about the data they share, the purpose of sharing t...

CanaryTrap: Detecting Data Misuse by Third-Party Apps on Online Social Networks

Online social networks support a vibrant ecosystem of third-party apps t...

Security and Privacy Perceptions of Third-Party Application Access for Google Accounts (Extended Version)

Online services like Google provide a variety of application programming...

SkillBot: Identifying Risky Content for Children in Alexa Skills

Many households include children who use voice personal assistants (VPA)...

Statistical Feature-based Personal Information Detection in Mobile Network Traffic

With the popularity of smartphones, mobile applications (apps) have pene...