@inproceedings{d50473ad7c0342fb88c8c82c906dd60f,
title = "ProfileGuard: Privacy preserving obfuscation for mobile user profiles",
abstract = "Analytics companies have become an integral part of the mobile advertising industry, enabling successful user targeting via user profiles, derived from the mobile apps installed by specific users. This poses a threat to privacy of such users, when apps indicating sensitive information, e.g., a gaming app showing a gambling problem, are the basis for profiling. In this paper, we propose a Profile Guard, novel app-based obfuscation mechanism to remove the dominance (prevalence amongst the interest categories present in a user profile) of selected private user profile interest categories. We show, based on extensive experimental evaluation using 2700 Android apps during a 9 month test campaign, that the best trade-off between the level of effort required by the obfuscating system and the resulting privacy protection can be achieved by choosing the obfuscating apps based on similarity with user's existing apps (while ensuring that the selected apps belong to a non-private category). We implement a POC ProfileGuard app to demonstrate the feasibility of an automated obfuscation mechanism. We also provide insights into the broad Google AdMob profiling rules, showing that there is a deterministic mapping of individual apps to profile interests, that profiles based on multiple apps represent a union of individual app profiles and that there is a minimum level of activity necessary for AdMob to build a stable user profile. Finally, we show the resulting effect of obfuscation on the received ads, demonstrating that modifying user profiles to include a richer set of interests results in correspondingly more diverse received ads.",
keywords = "Mobile apps, Obfuscation, Privacy, Targeted ads",
author = "Imdad Ullah and Roksana Boreli and Kanhere, {Salil S.} and Sanjay Chawla",
note = "Publisher Copyright: Copyright {\textcopyright} 2014 ACM.; 13th Workshop on Privacy in the Electronic Society, WPES 2014, in Conjunction with the ACM Conference on Computer and Communications Security, ACM CCS 2014 ; Conference date: 03-11-2014",
year = "2014",
month = nov,
day = "3",
doi = "10.1145/2665943.2665961",
language = "English",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
publisher = "Association for Computing Machinery",
pages = "83--92",
booktitle = "Proceedings of the ACM Conference on Computer and Communications Security",
address = "United States",
}