Assisting GDPR compliance through static analysis of Android apps / Mugdha Khedkar ; Advisor Prof. Dr. Eric Bodden. Paderborn, 2026
Inhalt
- Abstract
- Acknowledgments
- Contents
- 1 Introduction
- 2 Background
- 2.1 General Data Protection Regulation (GDPR)
- 2.2 Data Collection in Android apps
- 2.3 Program Slicing
- 2.4 Jicer
- 2.5 Data Privacy Vocabulary (DPV)
- 2.6 Privacy-Related Documentation
- 3 A Study of Android Data Collection
- 3.1 Privacy-Related Data
- 3.2 Identifier Datasets
- 3.3 Privacy-Relevant Input Classification Engine (PRICE)
- 3.4 Analyzing Data Collection Practices using PRICE
- 3.4.1 RQ1. Data Collection by Random Apps
- 3.4.2 RQ2. UI-Based Collection by Domain Apps
- 3.4.3 Discussion
- 3.4.4 Limitations and Threats to Validity
- 3.5 Related Work
- 3.6 Summary
- 4 Understanding Privacy-Aware Reporting Practices
- 4.1 Analyzing Data Disclosures using PRICE
- 4.1.1 RQ1. Analysis of Data Safety Sections
- 4.1.2 RQ2. Comparison between Actual and Reported Data Collection
- 4.1.3 Discussion
- 4.1.4 Limitations and Threats to Validity
- 4.2 Challenges Faced by Developers: An Empirical Study
- 4.2.1 Study Methodology
- 4.2.2 Study Results
- 4.2.3 Discussion
- 4.2.4 Limitations and Threats to Validity
- 4.3 Related Work
- 4.4 Summary
- 5 Exploring Automation of Privacy Assessments
- 6 Tool Support for Privacy-Aware Reporting
- 6.1 AutoPRICE for DSS Completion
- 6.1.1 Early Experiment
- 6.1.2 Feature Extensions
- 6.1.3 Limitations and Threats to Validity
- 6.1.4 Related Work
- 6.2 Extending Assessor View for RoPA Generation
- 6.2.1 Feature Extensions
- 6.2.2 Evaluation: Semi-Structured Interviews
- 6.2.3 Limitations and Threats to Validity
- 6.2.4 Related Work
- 6.3 Summary
- 7 Conclusion and Future Directions
- 8 Replication Package
- 8.1 Tool 1: Privacy-Relevant Input Classification Engine (PRICE)
- 8.2 Empirical Study: Challenges Faced by Developers
- 8.3 Tool 2: Assessor View
- 8.4 Tool 3: AutoPRICE
- Bibliography
- List of Acronyms
- List of Figures
- List of Tables
- A Appendix: Developer Survey Questionnaire
- B Appendix: Study Materials for Assessor View Evaluation (Developers)
- C Appendix: Study Materials for Assessor View Evaluation (Privacy Experts)
- D Appendix: Study Questionnaire for AutoPRICE Evaluation
- E Appendix: Study Materials for Assessor View RoPA Generation