Measuring Privacy Risks in Mobile Apps at Scale

Tuesday, June 04, 2024 - 3:10 pm3:30 pm

Lisa LeVasseur and Bryce Simpson, Internet Safety Labs

Abstract: 

Since 2022, Internet Safety Labs (ISL) has been measuring privacy behaviors in K-12 EdTech apps used in schools across the US. More than 120,000 data points and over 1000 apps worth of network traffic have been collected, analyzed, and presented in the form of app Safety Labels. This talk will share how and what was measured, and some of the key learnings, both from the research as well as the challenges/successes of measuring privacy at scale. Research and development was also performed by the ISL team, including Irene Knapp, Saish Mandavkar, and George Vo.

Lisa LeVasseur, Internet Safety Labs

Lisa LeVasseur is the founder, Executive Director and Research Director of Internet Safety Labs, a nonprofit technology watchdog. Her technical industry contributions and deep knowledge of consumer software products and connected technologies span more than three decades. Throughout her career in software she has developed a particular love for industry standards development work, software product & supplier management, and software product safety. She has dedicated the past five years to developing a vision for software product safety—where all software-driven technology is safe for people and humanity.

Bryce Simpson, Internet Safety Labs

Bryce Simpson is a Safety Researcher/Auditor at Internet Safety Labs. He's been performing cyber security and online privacy assessments for five years, with recent focus on educational technology platforms, synthesizing regulatory requirements and industry best practices. Specializing in meticulously analyzing the behavior of digital ecosystems, he is dedicated to navigating the intersection of privacy concerns and technological advancements, ensuring a secure online environment for all.

BibTeX
@conference {296339,
author = {Lisa LeVasseur and Bryce Simpson},
title = {Measuring Privacy Risks in Mobile Apps at Scale},
year = {2024},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = jun
}