PDL Abstract

Short Paper: CHIPS: Content-based Heuristics for Improving Photo Privacy for Smartphones

Poster at 7th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec),
July 2014. .

Jiaqi Tan, Utsav Drolia, Rolando Martins, Rajeev Gandhi, Priya Narasimhan

Carnegie Mellon University
Pittsburgh, PA 15213


The Android permissions system provides all-or-nothing ac- cess to users' photos stored on smartphones, and the permis- sions which control access to stored photos can be confusing to the average user. Our analysis found that 73% of the top 250 free apps on the Google Play store have permissions that may not re ect their ability to access stored photos. We pro- pose CHIPS, a unique content-based ne-grained run-time access control system for stored photos for Android which requires minimal user assistance, runs entirely locally, and provides low-level enforcement. CHIPS can recognize faces with minimal user training to deny apps access to photos with known faces. CHIPS's privacy identi cation has low overheads as privacy checks are cached, and is accurate, with false-positive and false-negative rates of less than 8%.

KEYWORDS: Android; Photo Privacy; Access Control