References & Citations
Computer Science > Cryptography and Security
Title: An Empirical Assessment of Global COVID-19 Contact Tracing Applications
(Submitted on 19 Jun 2020 (v1), last revised 22 Jan 2021 (this version, v6))
Abstract: The rapid spread of COVID-19 has made manual contact tracing difficult. Thus, various public health authorities have experimented with automatic contact tracing using mobile applications (or "apps"). These apps, however, have raised security and privacy concerns. In this paper, we propose an automated security and privacy assessment tool, COVIDGUARDIAN, which combines identification and analysis of Personal Identification Information (PII), static program analysis and data flow analysis, to determine security and privacy weaknesses. Furthermore, in light of our findings, we undertake a user study to investigate concerns regarding contact tracing apps. We hope that COVIDGUARDIAN, and the issues raised through responsible disclosure to vendors, can contribute to the safe deployment of mobile contact tracing. As part of this, we offer concrete guidelines, and highlight gaps between user requirements and app performance.
Submission history
From: Ruoxi Sun [view email][v1] Fri, 19 Jun 2020 02:12:56 GMT (1636kb,D)
[v2] Tue, 30 Jun 2020 10:25:30 GMT (1638kb,D)
[v3] Wed, 22 Jul 2020 03:51:34 GMT (1637kb,D)
[v4] Tue, 24 Nov 2020 11:46:02 GMT (1555kb,D)
[v5] Wed, 25 Nov 2020 11:09:58 GMT (1555kb,D)
[v6] Fri, 22 Jan 2021 08:36:28 GMT (1335kb,D)
Link back to: arXiv, form interface, contact.