No Risk, More Fun! Automating Breach of Confidentiality Risk Assessment for Android Mobile Health Applications

Simple item page
dc.contributor.authorBrüggemann, Thomas
dc.contributor.authorDehling, Tobias
dc.contributor.authorSunyaev, Ali
dc.date.accessioned2019-01-03T00:25:03Z
dc.date.available2019-01-03T00:25:03Z
dc.date.issued2019-01-08
dc.description.abstractWith the rapidly rising number of mobile health (mHealth) applications (apps), it is unfeasible to manually review mHealth apps for information privacy risks. One salient information privacy risk of mHealth apps are confidentiality breaches. We explore whether and how static code analysis is a feasible technology for app review automation. Evaluation of our research prototype shows that, on average, our prototype detected one breach of confidentiality risk more than human reviewers. Contributions are the demonstration that static code analysis is a feasible technology for detection of confidentiality breaches in mHealth apps, the derivation of eight generic design patterns for confidentiality breach risk assessments, and the identification of architectural challenges that need to be resolved for wide-spread dissemination of breach of confidentiality risk assessment tools. In terms of effectiveness, humans still outperform computers. However, we build a foundation for leveraging computation power to scale up breach of confidentiality risk assessments.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2019.515
dc.identifier.isbn978-0-9981331-2-6
dc.identifier.urihttp://hdl.handle.net/10125/59864
dc.language.isoeng
dc.relation.ispartofProceedings of the 52nd Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectSecurity and Privacy Challenges in Healthcare
dc.subjectInformation Technology in Healthcare
dc.subjectstatic code analysis, breach of confidentiality, privacy violation, mHealth, mobile health
dc.titleNo Risk, More Fun! Automating Breach of Confidentiality Risk Assessment for Android Mobile Health Applications
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0424.pdf
Size:
318.84 KB
Format:
Adobe Portable Document Format
Download

Collections

Security and Privacy Challenges in Healthcare