Information protection issues and detection methods in software development kit

doi:10.12267/j.issn.2096-5931.2024.01.010

Abstract

Abstract:

In the era of digital economy, China’s mobile Internet is booming. Apps, application distribution platforms, applets, software development kit (SDK) and others continue to develop rapidly and have also become key areas of personal information protection. Among them, SDK, as an essential functional module for app development, not only provides convenience for app development and promotes industrial prosperity, but also causes a series of issues that infringe on user rights. This article summarizes China’s policies and regulations on SDK personal information protection. It analyzes the personal information protection issues and harm caused by the current SDK, and proposes the detection methods and the regulatory governance model.

Key words: software development kit, personal information protection, regulatory governance

CLC Number:

CHANG Haolun, LI Xin, ZANG Lei. Information protection issues and detection methods in software development kit[J]. Information and Communications Technology and Policy, 2024, 50(1): 67-72.

Add to citation manager EndNote|Ris|BibTeX

URL:

http://ictp.caict.ac.cn/EN/10.12267/j.issn.2096-5931.2024.01.010

http://ictp.caict.ac.cn/EN/Y2024/V50/I1/67

Figures/Tables 1

References 12

[1]	李君. App中使用第三方SDK的安全隐患和应对措施[J]. 数字化用户, 2021, 27(13):49-50,54.
[2]	王然, 陈湉, 秦博阳. App嵌入第三方SDK安全隐患分析与对策建议[J]. 保密科学技术, 2019(10):20-23.
[3]	武林娜, 杜云, 宋恺, 等. 移动应用软件开发工具包的隐私安全研究[J]. 保密科学技术, 2022(9):10-16.
[4]	马凯. 面向Android生态系统中的第三方SDK的隐私泄露和安全性研究[D]. 济南: 山东大学, 2018. DOI:CNKI:CDMD:2.1018.107374.
[5]	马杰. Android系统外部SDK安全漏洞检测研究[J]. 微型机与应用, 2019, 38(8):6-12.
[6]	俞祥祥. iOS下基于SDK的安全防护框架设计[D]. 杭州: 杭州电子科技大学, 2018.
[7]	杜代忠. Android应用隐私政策与权限使用的一致性分析引擎的研究与实现[D]. 北京: 北京邮电大学, 2021. DOI:10.26969/d.cnki.gbydu.2021.001767.
[8]	樊华, 寇春晓. 《App违法违规收集使用个人信息行为认定方法》的典型案例分析[J]. 网络空间安全, 2020, 11(2):8-14.
[9]	国家互联网信息办公室秘书局, 工业和信息化部办公厅, 公安部办公厅. 关于印发《常见类型移动互联网应用程序必要个人信息范围规定》的通知[Z], 2021.
[10]	工业和信息化部. 工业和信息化部关于进一步提升移动互联网应用服务能力的通知[Z], 2023.
[11]	王炜炫. 跨APP个人信息共享的法律规制[J]. 南方金融, 2022(6):90-100.
[12]	杨家鸣. 移动应用软件开发工具包安全风险与管理研究[J]. 保密科学技术, 2022(9):17-22.

[1]	WANG Yanhong, KONG Ling, FU Yanyan, LI Jingdian. Analysis and suggestions on the standardization path of privacy computing technology [J]. Information and Communications Technology and Policy, 2024, 50(1): 32-36.
[2]	GU Chen, FENG Jinjin, FU Shan. Research on minors identification and verification in cyber space [J]. Information and Communications Technology and Policy, 2024, 50(1): 45-52.
[3]	CHANG Lin, LI Junhong, YANG Yangweiyi. The challenges and practice of social responsibility report of personal information protection in internet industry [J]. Information and Communications Technology and Policy, 2024, 50(1): 73-82.
[4]	SONG Kai, WANG Songhe, WU Linna, ZHOU Fei. Research on hotfix technology and governance strategy [J]. Information and Communications Technology and Policy, 2023, 49(8): 80-84.
[5]	SONG Kai, QU Leilei, YANG Mengke. Research on governance strategy of generative Artificial Intelligence [J]. Information and Communications Technology and Policy, 2023, 49(7): 83-88.
[6]	ZHANG Xiye, WANG Sha. A probe into difficult issues of personal information protection compliance [J]. Information and Communications Technology and Policy, 2023, 49(3): 74-79.
[7]	NING Hua, WANG Yanhong, WU Linna, DU Yun, . Research on the minimal necessity of APP personal information collection and use [J]. Information and Communications Technology and Policy, 2021, 47(8): 69-73.
[8]	QUAN Xiaofeng, LIU Gaofeng. Thoughts on personal information protection supervision strategies in the digital development era [J]. Information and Communications Technology and Policy, 2021, 47(6): 74-79.
[9]	YANG Zhengjun, ZHANG Guohua, SHI Yuxia, GAO Fuping. Research on the problems of digital advertising identifier and countermeasures [J]. Information and Communications Technology and Policy, 2021, 47(3): 41-48.
[10]	YAN Ximin. The application dilemma and countermeasures of informed consent framework from the perspective of personal information protection [J]. Information and Communications Technology and Policy, 2021, 47(11): 51-.
[11]	GUO Xiaoran , FANG Yuanxin , QU Dongxin . A comparative study of international regulations on the protection of personal information [J]. Information and Communications Technology and Policy, 2021, 47(10): 49-.
[12]	FANG Yu, LIU Shan. Thinking of data management on base of trends of the times [J]. Information and Communications Technology and Policy, 2018, 44(6): 1-4.
[13]	YANGJie. ResearchonChina’s personal information protection system in the Era of big data [J]. Information and Communications Technology and Policy, 2018, 44(6): 23-27.