Mitigating Location Privacy Attacks on Mobile Devices using Dynamic App Sandboxing

by   Sashank Narain, et al.

We present the design, implementation and evaluation of a system, called MATRIX, developed to protect the privacy of mobile device users from location inference and sensor side-channel attacks. MATRIX gives users control and visibility over location and sensor (e.g., Accelerometers and Gyroscopes) accesses by mobile apps. It implements a PrivoScope service that audits all location and sensor accesses by apps on the device and generates real-time notifications and graphs for visualizing these accesses; and a Synthetic Location service to enable users to provide obfuscated or synthetic location trajectories or sensor traces to apps they find useful, but do not trust with their private information. The services are designed to be extensible and easy for users, hiding all of the underlying complexity from them. MATRIX also implements a Location Provider component that generates realistic privacy-preserving synthetic identities and trajectories for users by incorporating traffic information using historical data from Google Maps Directions API, and accelerations using statistical information from user driving experiments. The random traffic patterns are generated by modeling/solving user schedule using a randomized linear program and modeling/solving for user driving behavior using a quadratic program. We extensively evaluated MATRIX using user studies, popular location-driven apps and machine learning techniques, and demonstrate that it is portable to most Android devices globally, is reliable, has low-overhead, and generates synthetic trajectories that are difficult to differentiate from real mobility trajectories by an adversary.


page 4

page 6

page 11


ZKSENSE: a Privacy-Preserving Mechanism for Bot Detection in Mobile Devices

CAPTCHA systems have been widely deployed to identify and block fraudule...

On the Importance of Location Privacy for Users of Location Based Applications

Do people care about their location privacy while using location-based s...

Generating synthetic mobility data for a realistic population with RNNs to improve utility and privacy

Location data collected from mobile devices represent mobility behaviors...

A Privacy-Preserving, Accountable and Spam-Resilient Geo-Marketplace

Mobile devices with rich features can record videos, traffic parameters ...

Privacy Preserving Release of Mobile Sensor Data

Sensors embedded in mobile smart devices can monitor users' activity wit...

Location Privacy Protection Game against Adversary through Multi-user Cooperative Obfuscation

In location-based services(LBSs), it is promising for users to crowdsour...

PACO: A System-Level Abstraction for On-Loading Contextual Data to Mobile Devices

Spatiotemporal context is crucial in modern mobile applications that uti...

Please sign up or login with your details

Forgot password? Click here to reset