ASAP 2.0: Autonomous & proactive detection of malicious applications for privacy quantification in 6G network services
While 6G networks, reliant on software, promise significant advancements, the proliferation of diverse applications deployed closer to users poses considerable privacy challenges. To counter this, privacy-first software development, as advocated by DevPrivOps, becomes essential. While Privacy-Enhancing Technologies (PETs) are frequently used, their limitations are well-documented. DevPrivOps strives to reinforce software privacy through prioritization, compliance, transparency, optimization, and informed decision-making. A promising alternative to PETs involves quantifying privacy to guide development and pinpoint potential threats, thus enhancing application privacy before deployment on OpenSlice network services. Privacy-centric malicious application detection, amongst other features, is a key component of this privacy quantification framework, serving to inform users of potential harm from such applications. In this study, we focus on privacy-centric malicious application detection. ASAP 2.0, an autonomous system, identifies these threats by scrutinizing requested application permissions. Building on its antecedent, ASAP 2.0 employs a tuned autoencoder trained via unsupervised learning. By analyzing reconstruction errors, it differentiates between potentially harmful and benign applications. A dynamically adjusted threshold assists in the decision-making process. Our model, validated on three public datasets, achieved an average Matthews Correlation Coefficient (MCC) of 0.976, outperforming baseline models such as Logistic Regression and Decision Trees. • Privacy Quantification Framework Adhering to the DevPrivOps Methodology. • Tool for detecting privacy-harmful applications through anomaly detection. • Applied during the risk analysis deployment phase of DevPrivOps. • Autoencoder to discriminate between harmful and benign applications. • Evaluated on three datasets, achieving an average MCC of 0.976 across all datasets.
Authors
- Paulo Salvador (ORCID: https://orcid.org/0000-0001-6832-9417)
- João Paulo Barraca (ORCID: https://orcid.org/0000-0002-5029-6191)
- Catarina Silva (ORCID: https://orcid.org/0000-0002-7969-8813)
- João Felisberto
Institutions
- Instituto de Telecomunicações (PT)
- University of Aveiro (PT)
Publication Details
- Journal
- Computer Communications
- Published
- 2025-03-22
- DOI
- https://doi.org/10.1016/j.comcom.2025.108145
- Citations
- 3
- Primary Topic
- Internet Traffic Analysis and Secure E-voting
- Type
- article
- Field-Weighted Citation Impact
- 7.44