吉林大学学报(信息科学版) ›› 2024, Vol. 42 ›› Issue (3): 537-543.

• • 上一篇    下一篇

违法违规收集个人信息评估系统

李 凯, 李 雨, 王乐枭, 张晓晴   

  1. 国家计算机网络应急技术处理协调中心 辽宁分中心 网络安全处, 沈阳 110036
  • 收稿日期:2022-06-12 出版日期:2024-06-18 发布日期:2024-06-17
  • 作者简介:李凯(1983— ), 男, 辽宁海城人, 国家计算机网络应急技术处理协调中心辽宁分中心高级工程师, 主要从事国家互联网 安全监测平台运行、 省内互联网安全事件处理和应急响应、 网络安全新技术跟踪等研究, ( Tel)86-13066670007(E-mail) likai@ 188. com
  • 基金资助:
    国家计算机网络应急技术处理协调中心青年基金资助项目(2021Q56) 

Evaluation System of APP Illegal Collection of Personal Information

LI Kai, LI Yu, WANG Lexiao, ZHANG Xiaoqing   

  1. Network Secunty Department, Liaoning Branch of National Computer Network Emergency Technology Handling and Coordination Center, Shenyang 110036, China
  • Received:2022-06-12 Online:2024-06-18 Published:2024-06-17

摘要: 为提高人工检测违法违规收集个人信息的效率, 基于正则表达式语义分析和机器学习技术, 开发了 APP (Application)违法违规收集个人信息评估系统。 对线上 APP 进行违法违规检测, 生成检测算法和规则, 重点解决了隐私政策半自动化获取、 APP 检测引擎、 定制 ROM(Read Only Memory)的动态沙箱等技术难点。 利用开发的原型系统对各大应用平台上架 APP 进行常态化技术检测, 检测结果表明, 该系统大幅提升了违法违规收集个人信息 APP 综合治理研判效率。

关键词: 移动互联网应用程序, 个人信息保护, 语义分析, 机器学习

Abstract: To improve the efficiency of manual detection of illegal and irregular collection of personal information, an APP(Application) personal information evaluation system for illegal and irregular collection is developed based on techniques such as regular expression semantic analysis and machine learning. We conducted illegal and irregular detection on online apps, generated detection algorithms and rules, and focused on solving technical difficulties such as semi automated access to privacy policies, app detection engines, and dynamic sandboxes for custom ROM(Read Only Memory) . The developed prototype system is used to conduct regular technical testing on the apps listed on major application platforms. The testing results show that the system significantly improves the efficiency of comprehensive governance and judgment of illegal and irregular collection of personal information apps, and effectively supports the relevant work of higher-level management departments.

Key words: application( APP) , personal information protection, semantic analysis, machine learning

中图分类号: 

  • TP39