Title
Permission Issues in Open-Source Android Apps: An Exploratory Study
Abstract
Permissions are one of the most fundamental components for protecting an Android user's privacy and security. Unfortunately, developers frequently misuse permissions by requiring too many or too few permissions, or by not adhering to permission best practices. These permission-related issues can negatively impact users in a variety of ways, ranging from creating a poor user experience to severe privacy and security implications. To advance the understanding permission-related issues during the app's development process, we conducted an empirical study of 574 GitHub repositories of open-source Android apps. We analyzed the occurrences of four types of permission-related issues across the lifetime of the apps. Our findings reveal that (i) permission-related issues are a frequent phenomenon in Android apps, (ii) the majority of issues are fixed within a few days after their introduction, (iii) permission-related issues can frequently linger inside an app for an extended period of time, which can be as high as several years, before being fixed, and (iv) both project newcomers and regular contributors exhibit the same behaviour in terms of number of introduced and fixed permission-related issues per commit.
Year
DOI
Venue
2019
10.1109/SCAM.2019.00034
2019 19th International Working Conference on Source Code Analysis and Manipulation (SCAM)
Keywords
Field
DocType
Mobile Permissions, Android, Mobile Software Engineering, Software Repository Mining
Permission,User experience design,Internet privacy,Programming language,Best practice,Android (operating system),Computer science,Commit,Exploratory research,Empirical research
Conference
ISSN
ISBN
Citations 
1942-5430
978-1-7281-4938-7
1
PageRank 
References 
Authors
0.35
42
5
Name
Order
Citations
PageRank
Gian Luca Scoccia193.17
Anthony Peruma2465.98
Virginia Pujols310.35
Ivano Malavolta446849.69
Daniel E. Krutz55512.67