Detection and deterrence from data collecting applications in Android

Android users are occasionally troubled by the slow UI responses and sudden application/OS crashes. These problems are mainly caused by software aging, a phenomenon of progressive degradation of performance and dependability typically observed in long-running software systems. A countermeasure to software aging is software rejuvenation, i.e., manual or scheduled restart at different levels, such as application, OS, and device. Various software aging and rejuvenation models have been proposed for different software systems. However, these traditional models cannot be applied in the context of mobile devices, as they seldom consider the patterns of usage behavior and user experience specific to mobile phones. We address this problem based on the observations that the usage time of mobile phones is typically fragmented in daily life, with frequent and periodical switches between active and sleep modes, and that the user experience on fluent operation in the active mode is a key concern for mobile users. These insights are exploited to model the usage behavior and aging process by individual Stochastic Petri-Nets, and then to compose them into a Continuous Time Markov Chain (CTMC). Furthermore, we propose proactive rejuvenation strategies based on such CTMCs to achieve the best user experience and the least user interference, such as restarting the device when it is in sleep mode and before it enters an aged state. To consider user experience - a key concern of mobile users which is still less prominent in traditional dependability measurements – we propose new related metrics: for fluency (i.e., the probability that a phone offers a fast UI response to the users), and for the degree of overall user experience. We demonstrate the effectiveness and advantages of the proposed models and metrics via simulations as well as an empirical study.

A Study on the Forms and User's Behaviors of the Public Seats in National Taipei University of Technology

This study examines the Indonesian government’s accountability for the 2024 Taxpayer Identification Number (NPWP) data breach and evaluates the implementation of personal data protection obligations under the Personal Data Protection Law (PDP Law). Using a normative legal research method with statutory, conceptual, and case-based approaches, the study finds that the Directorate General of Taxes (DGT) has not fully met its duties as a Personal Data Controller. The large-scale breach, involving more than six million records, reveals weaknesses in access control, Data Protection Impact Assessments (DPIAs), privacy-by-design practices, and breach notification procedures. The PDP Law provides administrative, civil, and criminal liability mechanisms for negligent actors, all of which may be applied cumulatively. The findings indicate a significant gap between legal norms and administrative practice, undermining public trust and limiting the effectiveness of the PDP Law in safeguarding personal data.

With the ascension of computer processing capacity, the problems of massive satellite images presentation encountered in the rendering frame rate, large data scheduling, external memory organization has been basically solved, Google earth put forward one multi-user solution dependent on the powerful cluster rendering technology and collaborative network transmission technology. However, in the limited resources of the stand-alone system, the display of multi-user collaborative data become another challenge. This paper proposed a collaborative scheduling scheme for multi-user scheduling problem of satellite image data in the stand-alone mode, in the fully enhance the system resource utilization condition, balanced user's average experience and data throughput condition. Finally, in the prototype system, we verify its validity and analyze its efficiency and interactivity though the user's experience way.

The Android operating system dominates the smartphone market. Thus, to service the market, the number of Android applications has risen dramatically. These applications are processing a great amount of sensitive data, which could result in various concerns including data leakage and privacy violations. For example, applications may misuse the sensitive data stored on Android devices and violate the privacy of the user. Therefore, it is essential to maintain user privacy and protect sensitive data from leakage. Static data flow analysis approaches are used for analyzing Android applications to uncover security and privacy issues. However, these approaches frequently generate false alarms, given the different challenges created by Android applications, such as inter-component communication (ICC), reflection, and implicit flow. This work presents the DroidRista approach for conducting static data flow analysis on Android applications to detect sensitive data leakage. DroidRista analyzes ICC, reflection, and implicit flow in Android applications. To evaluate the performance of DroidRista, it was tested on three data sets. The results demonstrate improved performance in terms of detecting data leakage compared to existing static data flow analysis approaches.

In the contemporary social landscape, the widespread use of social media, such as platforms like TikTok, Instagram, and YouTube, has become a prominent trend in various circles of society, especially in Indonesia. As the number of users on these platforms increases, concerns regarding user security and privacy also increase. Data breaches in 2021 affecting 235 million users on Instagram, TikTok, and YouTube underscored the importance of researching the multifaceted dynamics around privacy concerns, levels of trust, risk awareness, and user behavior patterns related to sharing personal information on social media platforms. This research aimed to address this critical issue by introducing a research model developed based on relevant hypotheses from previous research. The sample used in this research consisted of social media users in Indonesia. Methodologically, this research used sophisticated structural equation modeling (SEM) tools for hypothesis testing and confirmatory factor analysis (CFA) to validate the efficacy of existing research models. These findings indicated that users’ trust, awareness, privacy concerns, and behavioral intentions significantly and positively influence the tendency to share personal data on social media platforms. This research provides valuable insights into the complex interactions between factors influencing user behavior in social media privacy, thereby offering implications for academia and practical applications.

The development of digital technology can affect the performance of data management systems carried out by both government and private agencies, various digital-based activities that have an impact on efficiency in performance. Data leaks obtained through electronic media are valuable things such as population registration numbers, family cards, and identity cards. The importance of protecting personal data so that there is no data exploitation by irresponsible parties. The results of this study answer the problem, namely, first, the PDP Law has not been able to provide legal protection to citizens if the government as the data controller has been negligent over personal data. This, legal accountability for the government's negligence in protecting the personal data of its citizens still refers to government actions that are not in accordance with the general principles of good governance or abbreviated as AUPB as regulated in Law Number 30 of 2014 concerning Government Administration. Second, Legal Protection for the Community Experiencing Personal Data Leaks in Facebook account data leaks can be carried out through a State Administrative Dispute Lawsuit as based on Article 17 paragraph (1) and paragraph (2) letter c of Law Number 30 of 2014 concerning Government Administration in the form of abusing authority. The basis for the State Administrative Lawsuit against the Government is because the act of leaking data on Facebook accounts belonging to Indonesian citizens has violated the provisions of the General Principles of Good Governance (AUPB), especially accuracy, public interest, and good service as regulated in Article 2 of Law Number 30 of 2014 concerning Government Administration. However, the government can also be sued in a civil manner if there is negligence in controlling personal data belonging to citizens as regulated in Article 12 of Law Number 27 of 2022 concerning Personal Data Protection.

BPJS Health is the Health Social Security Organizing Agency which is responsible for administering health insurance programs for the Indonesian people. However, in the era of increasingly digitalization, user data leakage is a serious problem that must be handled seriously. User data leaks have become an increasingly disturbing issue in this digital era. One of the entities responsible for maintaining the confidentiality of user data is the Social Security Administering Agency for Health. This article aims to analyze BPJS Health's responsibility for leaking user data from a criminal law perspective. This research uses normative research methods with a statutory approach and related cases in its analysis. The research results show that leakage of user data by the Health Social Security Administering Agency can violate several criminal provisions as stated in Law no. 27 of 2022 concerning personal data protection and based on Law no. 11 of 2008 concerning Information and Electronic Transactions, especially in the context of violations of confidentiality and protection of personal data. It can be concluded that BPJS Health has criminal legal responsibility for user data leaks. To minimize the risk of data leaks, the Social Security Administering Agency for Health needs to improve system security and compliance with personal data protection regulations. Apart from that, the government needs to strengthen supervision and law enforcement in dealing with cases of data leaks involving public entities such as BPJS Health.

Since Google launched the Android open source mobile platform, Android operating system has occupied half of the mobile phone industry. Meanwhile, the Android applications also have a lot of demand. But now some Android applications on the market contain a lot of advertising, these redundant information affecting the customer experience. In order to enhance the user experience, in this paper, will base on Eclipse and Android SDK developer tools which Google launched, use Java to development a simple and practical audio player which paying attention to the user experience. This audio player will uses ContentResolver and Curor to obtain music files, will uses the Service components calls the MediaPlayer class for the music playing in the background. This audio player support the user wonderful music and as well as not to bring other negative effects, at the same time users can normally use.

Relevance. When considering claims for leakage of information constituting the patient's personal data and his medical confidentiality, the courts give a different assessment of the grounds for civil liability of medical organizations. The article reveals the established approaches to assessing the guilt of a medical organization that violated the confidentiality of personal information of citizens who applied for medical help.The purpose of the study is to supplement theoretical provisions aimed at deepening scientific knowledge about the civil liability of medical organizations for the unlawful dissemination and (or) use of patient's personal data, including information related to medical confidentiality; development of proposals to eliminate the imbalance of the patient's personal data confidentiality regime and his right to legal assistance.Objectives: analyze civil legislation, legislation on personal data, the positions of the Constitutional and Supreme Courts of the Russian Federation regarding the protection of patient personal data, decisions of courts of general jurisdiction on claims of liability of medical organizations for unlawful actions with personal data that resulted in the leakage of personal information about patients; to study and update the proposals available in theory aimed at uniform law enforcement in cases of this category.Methodology. The study was carried out through methods of induction and deduction, analysis and synthesis, formal-legal, system-analytical and formal-logical methods, as well as a method for generalizing judicial practice. The results are reflected in the formulated proposals aimed at improving the judicial protection of personal data of patients of medical organizations, and the uniformity of judicial practice in terms of the responsibility of medical organizations in cases of this category.Conclusion. In cases of responsibility of medical organizations for the leakage of personal data of patients, uniform law enforcement did not work out. The right of a lawyer to access the personal data of persons who received medical assistance did not receive an unambiguous assessment by judicial practice. To eliminate the existing gaps in the protection of the intangible benefits of the patient under consideration, the need to exclude their personal data from the confidentiality regime for the administration of justice and in the provision of qualified legal assistance under the contract is argued.

The rapid growth of internet-based services and applications has revolutionized the way we communicate, interact, and conduct business. However, this widespread connectivity also brings forth numerous challenges related to performance and privacy security at the internet layer. This paper aims to provide a comprehensive analysis of the various issues that arise in this context, highlighting their impact on user experience, data protection, and network efficiency, to address performance concerns; the research paper investigates the factors affecting internet Layer. Through extensive research studies, the paper examines the impact of network congestion, routing inefficiencies, and protocol limitations on the overall performance of internet-based services. This research delves into the vulnerabilities and risks associated with the internet layer. It investigates the potential threats posed by malicious actors, including hackers, data breaches, and unauthorized access to sensitive information. The findings of this research contribute to a comprehensive understanding of the interplay between performances and privacy security issues at the internet layer. By identifying the key challenges and potential solutions, this study provides valuable insights for network administrators, service providers, policymakers, and end-users to optimize performance while ensuring robust privacy and security measures. Ultimately, this research aims to foster a safer and more efficient internet ecosystem for all stakeholders.

Internet of Things (IoT) devices are becoming ubiquitous in the 21st-century world. Most individuals have interacted with at least one device such as an Alexa, Ring doorbell, or Nest thermostat. Many of these devices have access to personal information; however, the information security of these devices and the privacy of the personal information stored on these devices is not well understood by users. A survey was conducted to examine users’ experience, knowledge, perceptions, and behaviors associated with those devices’ privacy and security. The survey results revealed that participants perceive there is a risk with their IoT devices, however, there are two key issues that prevent them protecting themselves. First, they appear to have limited cybersecurity knowledge, including limited knowledge of who is accessing their data and for what purpose. Second, they do not always take the necessary precautions due to the inconvenience of such actions. These findings demonstrate that the privacy paradox is prevalent among users of IoT devices.KeywordsInternet of ThingsPrivacySmart homeSurveyPrivacy paradox

Mobile devices have become widespread computing technology, people prefer to use than desktop devices. These connected devices and their features like an exchange of data, video calling etc. have made our lives simple but, this has also increased data security concerns. At present, Google's Android is dominating the market share of mobile devices; as a result, it has become a big target for malware writers. Android users can download applications from official or third-party stores. Google implements various security policies to ensure secure distribution of applications but third-party application stores have less efficient or no such policies. This makes such markets more attractive for malware writers. This paper investigates Android application security by analysing 1,946 free most downloaded Android applications in the year 2016: 1,300 from Google Play Store and 646 from third-party Android applications. 100 samples from 33 different malware families (with variants) prominent in the Android market during January 2016 to April 2016 were also collected that acted as a template for malware detection. Further, based on detected malware samples, an evaluation-based study on ten anti-malware applications is performed to identify how well they protect users from malware.

The Privacy Journal (2003), a print newsletter and Web site devoted to privacy matters, defines the present-day use of the word privacy as “the right of individuals to control the collection and use of personal information about themselves.” Similar definitions are provided by law specialists (Gavison, 1980; Warren & Brandies, 1890). The networked society changes the way in which privacy rights are defined, used and interpreted, because: a. The IT-enabled channels of communication change the rules of personal and commercial interaction; b. The participation in the networked society implies a diminishing of individual privacy rights. The fundamental principle of the networked society is information sharing and processing (Kling & Allen, 1996). Advances in computing technology—that represents the infrastructure of the networked society—make possible to collect, store, analyze, and retrieve personal information created in the process of participation. The manifestation and the protection of individual privacy rights represent the field of conflict between various disciplines and social events. The heterogeneous nature of this phenomenon is mirrored in this paper, which aims to present the complex nature of privacy rights in the context of the networked society. The study proposes a negotiating model of online privacy rights, and analyses the necessary conditions for the implementation of this model on the Internet. The new economy is redefined on the basis of information entrepreneurism (Kling & Allen, 1996; Zwick & Dholakia, 1999). This cultural paradigm emphasizes the use of data-intensive analysis techniques for designing and implementing effective marketing and management strategies. This has as a direct consequence the use of an information superpanopticon–a concept derived from Foucault’s panopticon, a system of perfect surveillance and control. Online privacy is a major concern for Internet users (Ackerman, Cranor, & Reagle, 1999). For the individual Internet user, the privacy threats fall into two main categories: a. Web tracking devices that collect information about the online behavior of the user (e.g., cookies); b. The misuse of the personal information provided by the online user in exchange of specific benefits: increased personalization, Web group membership, etc. The databases, intelligent agents and tracking devices are surrounding the Internet users with a Web of surveillance, which is often hidden and unknown to the users. The surveillance is initiated by the simple act of presence on the Internet. Specialized software applications, such as cookies are tracking the online behavior of Internet users, feeding the data into databases, which create and permanently update a profile of online consumers. These profiles are then used for segmenting the market and targeting the most profitable consumers. A company can use cookies for various valid reasons: security, personalization, marketing, customer service, etc., however, there is an important distinction between cookies, which are active only within a specific Web site, and the ones that can track the user’s activity across unrelated Web sites. Recently, some aggregator networks have deployed hidden ‘pixel beacon’ technology that allows ad-serving companies to connect unrelated sites and overcome the site-specific nature of traditional cookies (Mabley, 2000). Additionally, some companies are now connecting this aggregated data with offline demographic and credit card data. Eventually, these resulting databases can be used or sold as powerful marketing tools. Exercising control of information, after it was voluntarily released, presents another critical problem. The misuse of personal information covers many possible aspects, which can be defined as any use which is not explicitly defined in the company’s privacy disclaimer, or which is not approved by the informed customer. For example, in 2000, Toysurus.com was subject to intense debate and controversy, when it was discovered that shoppers’ personal information was transferred through an unmarked Internet channel to a data processing firm, for analysis and aggregation. This operation was not disclosed in the company’s privacy disclaimer, and therefore, online customers were not aware of it. Regulators and legislators have addressed the controversial privacy issue quite differently across the world (Nakra, 2001). The USA, the largest world’s financial and Internet market, has not yet adopted a national, standard-setting privacy law (Jarvis, 2001). U.S. privacy statutes have primarily focused so far on protecting consumers’ financial data, health information, and children’s personal information (Desai, Richards, & Desai, 2003; Frye, 2001). In comparison with the American official opinion that online privacy protection is a matter of voluntary self-regulation by market-driven companies, the Europeans consider that it is more effective to enforce specific legislation regarding this issue. The current European approach is based on three basic tenets: 1. Individuals have the right to access any data relating to them and have it kept accurate and up-to-date; 2. Data cannot be retained for longer than the purpose for which it was obtained, nor used or disclosed “in a matter incompatible with that purpose”, and must be kept only for “lawful purposes”; 3. Those who control data have “a special duty of care” in relation to the individuals whose data they keep. Data commissioners oversee these rights in each European country and require most “data controllers”—people who handle data—to register with them to track what information is being collected and where. They are charged also with investigating all complaints from citizens. These principles have been incorporated in the European Data Directive, which came into effect in 1998, and more recently, in the European Directive on Privacy and Electronic Communications, adopted in 2002. Despite these legislative efforts, it is not yet clear how effective are the measures implemented by EU States. The direct involvement of governmental institutions can be considered as a form of censorship that can undermine the freedom and the flexibility of the Internet domain.

Online community networks provide a variety of interaction mechanisms, many of which focus on the confirmation of functional roles or the validation of user experience results. This study is concerned with the increasing emphasis on the publicity of community media among colleges and universities. Therefore, this study adopts the fan pages of university institutions as the object of research, in order to investigate the relationships between different types of information formats (links, photos, and videos) and the emotions and behaviors of their fans. Using stimulus-organismresponse theory, a model of the relationship between information format, emotional response, and behavioral response is tested. Data were collected from the twenty largest university fan pages in the USA in this study. A total of 13,006 posts and user comments are collected, compared, and analyzed. Findings validate an interactive correlation between user behavior and information format. Notably, university fan pages with larger fan bases are more capable of applying information formats to prompt user interaction and users’ willingness to comment and share, consequently expanding the organic reach of their posts. These results reiterate that users’ emotions significantly affect their behaviors and that information serves as a key function in user experiences. Effectively triggering user emotions has become the primary means for community administrators to produce viral posts.