【導(dǎo)讀】示安裝的消息框，提示用戶是否接受安裝。彈出消息提示框的目的是為了幫助。消息給目標(biāo)主機(jī)，以便開發(fā)人員更好的修補(bǔ)漏洞。我們在兩個(gè)城市之間進(jìn)行了一系。經(jīng)過我們的調(diào)查發(fā)現(xiàn)，大部分Android手機(jī)用戶在安裝。全性問題，在很多情況下，安裝的應(yīng)用程序往往有時(shí)候可能攜帶病毒軟件。機(jī)銷量排行榜中，Android手機(jī)強(qiáng)占了一半以上的市場銷售份額。截至2021年5月，據(jù)谷歌報(bào)道，總共有20萬的應(yīng)用。程序從Android市場上被用戶下載下來，并且總共被安裝了億次。通過對Android應(yīng)用程序總部的調(diào)查報(bào)告顯示，雖然在Android市場上存在。分之倍的速度在增長。并從中獲取利潤。當(dāng)然，Android市場是不會(huì)去檢查你的應(yīng)用程序到底包含哪些基。對此谷歌來完成這項(xiàng)保護(hù)Android. 了減少給客戶到來不必要的麻煩。要的理論依是根據(jù)對Android手機(jī)運(yùn)行的安全性或者提高系統(tǒng)的安全性能出發(fā)的。由于Android提供的API文檔接口與用。Felt主要工作是揭秘Android權(quán)限的工作原理，試圖進(jìn)一步解釋權(quán)限。個(gè)應(yīng)用程序的完整信息。

　　

【正文】 ms of information sharing. We recruited participants through flayers around each city and local Craigslist postings. Each candidate filled out a short presurvey online before the interview, which allowed us to confirm they did use an Androidenabled Smartphone. Those participants who opted into the subsequent interview arrived at our labs and pleted our consent form allowing us to make an audio recording of their interview. Following the interview participants were given the opportunity to optin to share their application information with us, collected through a script running on a local laptop, which we connected their phone to via USB while they watched. Participants’ quotes throughout the remainder of the paper are taken from transcriptions made from the audio recordings of the interviews. Participants were paid $20 for successful pletion of the interview, in the form of their choices of Target, Starbucks, or Barnes amp。 Noble gift cards. 5 Demographics and Survey Responses Our online survey was pleted by 77 participants, 20 of whom pleted the lab interview. Participants P1P6 is from Seattle, P7P20 from participants is female, and 10 are male. The ages of our participants range from 19 to 48, with an average of 29. Six of our participants were in techrelated fields, the other fourteen were not. Fourteen of our participants have been using Android for less than a year, five participants reported up to two years of use, and only one reported having used Android for more than two years. A Conundrum of Permissions: Installing Applications on and Android Smartphone 6 6 Results and Discussion The following sections detail our findings and participants’ thoughts on various parts of the Android ecosystem. We begin with the responses to six of the ten permissions we asked participants to explain. These responses highlight the broad range of often inaccurate knowledge around the humanreadable terms Android provides to users at application install. Next, we discuss general concerns, response to Android in the media, and awareness of malicious applications. Permissions Display Understanding Half of our participants mentioned the existence of the permissions display before being promoted. When a participant did mention the display, we immediately showed a paper example of one (using the Face book, Pandora, or Amazon Kindle permissions, Screen 3 of Figure 1). Many reported reading, or at least Participant overview Table 1. Overview of out 20 survey participants. Columns 24, list their age, gender, and industry. Columns 58 list their phone provider, phone model, Android OS version, and the amount of time they have primarily used Android devices. Columns’ 9 and 10 show the number of apps they have downloaded and the number they report frequently using. All information is selfreported. Participants were able to identify these screens, recognized them immediately, and Phone Phone OS Time Using Apps Apps Gender Age Occupation provider model version Android downloaded really used 1 Female 24 Education Verizon LG Ally I am not sure 16 months 110 A few 15 2 Male 48 Other Verizon HTC Incredible Froyo 16 months 1125 A few 15 3 Male 44 Agriculture TMobile Motorola Cliq Cupcake 12 years 101+ A ton 20+ 4 Male 19 Food Service TMobile Galaxy S Eclair 16 months 1125 A bunch 620 5 Female 45 Legal Sprint HTC EVO 4G Honeyb 16 months 110 A bunch 620 6 Female 26 Retail Sprint Samsung Replenish I am not sure 16 months 110 A bunch 620 7 Female 34 Engineering TMobile LG Optimus Eclair 7 months1 year 1125 A few 15 8 Male 23 Computers Verizon Motorola Droid X Gingerbread 7 months1 year 26100 A ton 20+ 9 Female 25 Other Verizon Motorola Droid X I am not sure Less than 1 month 110 A few 15 10 Male 32 Engineering TMobile HTC G2 Eclair 7 months1 year 1125 A bunch 620 11 Female 21 Entertainment Sprint Something Samsung I am not sure 16 months 110 A few 15 12 Female 22 Other TMobile HTC MyTouch 4G I am not sure 7 months1 year 1125 A few 15 13 Female 21 Don’t work Sprint HTC Evo Shift Gingerbread 12 years 110 A few 15 14 Male 20 Real Estate Verizon Motorola Droid X Gingerbread 12 years 101+ A bunch 620 15 Male 36 Media / Publishing Verizon Motorola Droid 2 Froyo 7 months1 year 110 A few 15 16 Male 22 Engineering Sprint HTC EVO 4G Gingerbread 16 months 26100 A bunch 620 17 Male 22 Don’t work Verizon Motorola Droid 2 I am not sure 12 years 26100 A bunch 620 18 Female 23 Other TMobile HTC G2 Gingerbread More than 2 years 26100 A bunch 620 19 Male 46 Engineering ATamp。T Google Nexus One Gingerbread 12 years 26100 A bunch 620 20 Female 21 Engineering ATamp。T Galaxy S II Gingerbread Less than 1 month 110 A few 15 A Conundrum of Permissions: Installing Applications on and Android Smartphone 7 occasionally felt very strongly about them. When asked if he read these screens frequently, one such participant said, “Yeah, all the time. It is just so easy for those apps to do whatever they want。 it’s a way to protect yourself I guess. Call me paranoid.” Some participants stated that they were not sure how trustworthy the permissions display was. One said of it, “Is it a requirement to be on there [the market] that the software tells you what it is accessing .Are they required to notify me or not, I don’t know.” Unfortunately, most participants do not believe they understand the terms used and have not gone out of their way to learn what they mean. We showed a list of ten permissions with the permission group label, in the fashion they would be shown in the permissions display, to each user and asked them to explain to us their understanding of eac