Modern vehicles have become sophisticated computation and sensor systems, as evidenced by advanced driver assistance systems, in-car infotainment, and autonomous driving capabilities. They collect and process vast amounts of data through various embedded subsystems. One significant player in this landscape is Android Automotive OS (AAOS), which has been integrated into over 100M vehicles and has become a dominant force in the in-vehicle infotainment market. With this extensive data collection, privacy has become increasingly crucial. The volume of data gathered by these systems raises questions about how this information is stored, used, and protected, making privacy a critical issue for manufacturers and consumers. However, very little has been done on vehicle data privacy. This paper focuses on the privacy implications of AAOS, examining the exact nature and scope of data collection and the corresponding privacy policies from the original equipment manufacturers (OEMs). We develop a novel automotive privacy analysis tool called PriDrive which employs three methodological approaches: network traffic inspection, and both static and dynamic analyses of Android images using rooted emulators from various OEMs. These methodologies are followed by an assessment of whether the collected data types were properly disclosed in OEMs and 3rd party apps' privacy policies (to identify any discrepancies or violations). Our evaluation on three different OEM platforms reveals that vehicle speed is collected at a sampling rate of roughly 25 Hz. Other properties such as model info, climate & AC, and seat data are collected in a batch 30 seconds into vehicle startup. In addition, several vehicle property types were collected without disclosure in their respective privacy policies. For example, OEM A's policies only covers 110 vehicle properties or 13.02% of the properties found in our static analysis.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    Analyzing Privacy Implications of Data Collection in Android Automotive OS


    Beteiligte:
    Gözübüyük, Bulut (Autor:in) / Tang, Brian (Autor:in) / Shin, Kang G. (Autor:in) / Pesé, Mert D. (Autor:in)

    Erscheinungsdatum :

    2024


    Medientyp :

    Preprint


    Format :

    Elektronische Ressource


    Sprache :

    Englisch




    A First Look at Android Automotive Privacy

    Pese, Mert D. | British Library Conference Proceedings | 2023


    A First Look at Android Automotive Privacy

    Pese, Mert D. | SAE Technical Papers | 2023


    Privacy preferences in automotive data collection

    Anna Dowthwaite / Dave Cook / Anna L. Cox | DOAJ | 2024

    Freier Zugriff

    Android Automotive Testing Solution

    Vishwakarma, Rishika / K, SONA BABU | SAE Technical Papers | 2021


    Android Automotive Testing Solution

    K, SONA BABU / Vishwakarma, Rishika | British Library Conference Proceedings | 2021