Mobile Application Security Risk Score: A sensitive user input-based approach

Abstract

This research paper introduces a Hierarchical Weighted Risk Scoring Model specifically designed to assess the risk levels of mobile applications based on user inputs. Through an extensive review of literature on risk score calculation models and term sensitivity identification techniques, this study categorizes terms based on their sensitivity, particularly in relation to sensitive user inputs that may potentially lead to data leaks. The sensitivity of user terms are defined based on the guidelines from PIPEDA. By integrating these terms, along with test outcomes and weights, the model accurately calculates risk scores. The resulting risk assessments provide users with valuable insights, empowering them to make informed decisions and effectively manage risks associated with mobile application usage. This research contributes to the field by offering a user-centric framework that combines various risk score calculation models and term sensitivity identification techniques, tailored specifically for mobile applications and addressing the potential risks arising from sensitive user inputs.