NDSS 2025 – Evaluating Users’ Comprehension and Perceptions of the iOS App Privacy Report
好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内。首先，我得仔细阅读用户提供的文章内容，找出关键信息。
文章主要讨论的是Apple的App隐私报告，研究用户对这个报告的理解和反应。研究方法是通过半结构化访谈，分析用户对数据访问、传感器使用以及网络活动的了解情况。
用户们能够轻松理解哪些应用在何时访问了他们的数据和传感器，并知道如何移除权限。然而，对于应用和网站的网络活动，他们感到困惑和不知所措，尤其是面对大量联系的域名时，不知道该如何采取补救措施。
研究结论建议隐私报告应提供更多解释或汇总技术细节，帮助用户做出更明智的决策。这可能包括说明域名联系的目的等。
现在，我需要将这些信息浓缩到100字以内。重点包括：研究对象（iOS隐私报告）、研究方法（访谈）、用户理解情况（容易理解数据访问，困难理解网络活动）、建议（提供更多解释）。
最后，确保语言简洁明了，不使用复杂的术语，并且直接描述内容。
</think>
研究探讨了苹果iOS隐私报告的效果,发现用户能轻松理解应用对数据和传感器的访问,但对网络活动感到困惑,建议增加技术细节解释以提升隐私保护决策能力。
2025-12-15 16:0:0
Author: securityboulevard.com(查看原文)
阅读量:5
收藏
Session 6A: LLM Privacy and Usable Privacy
Authors, Creators & Presenters: Xiaoyuan Wu (Carnegie Mellon University), Lydia Hu (Carnegie Mellon University), Eric Zeng (Carnegie Mellon University), Hana Habib (Carnegie Mellon University), Lujo Bauer (Carnegie Mellon University)
PAPER
Transparency or Information Overload? Evaluating Users’ Comprehension and Perceptions of the iOS App Privacy Report
Apple’s App Privacy Report, released in 2021, aims to inform iOS users about apps’ access to their data and sensors (e.g., contacts, camera) and, unlike other privacy dashboards, what domains are contacted by apps and websites. To evaluate the effectiveness of the privacy report, we conducted semi-structured interviews to examine users’ reactions to the information, their understanding of relevant privacy implications, and how they might change their behavior to address privacy concerns. Participants easily understood which apps accessed data and sensors at certain times on their phones, and knew how to remove an app’s permissions in case of unexpected access. In contrast, participants had difficulty understanding apps’ and websites’ network activities. They were confused about how and why network activities occurred, overwhelmed by the number of domains their apps contacted, and uncertain about what remedial actions they could take against potential privacy threats. While the privacy report and similar tools can increase transparency by presenting users with details about how their data is handled, we recommend providing more interpretation or aggregation of technical details, such as the purpose of contacting domains, to help users make informed decisions.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
