10 February 2025Analysis · Mobile Security · Privacy & Crypto Security Analysis of Native Cryptography in Android Apps More and more Android apps embed native cryptography such as OpenSSL, yet existing tools only detect errors in Java code.
22 January 2025Overview · Transparency · Privacy & Crypto Authenticity & Verifiability in Federated Learning: Overview & Methods Trustworthy federated learning needs authenticity and correctness guarantees – methods for the six trust points in the FL process.
30 September 2024Analysis · Mobile Security · Privacy & Crypto Analysis of Fingerprinting Libraries on Android Fingerprinting libraries recognise users across apps – which device data they collect and how changes to Android's API could prevent it.
26 September 2024Overview · Privacy & Crypto · E-Government MPC-based Secure Aggregation in Federated Learning: Overview, Protocols, & Google’s Gboard With MPC-based secure aggregation, the server sees only the sum of ML parameters – an overview, protocol comparison and Google's Gboard.
4 September 2024Overview · Privacy & Crypto · Digital Identity Privacy-preserving Identifiers Unique identifiers let services link users across sites – methods based on OPRF, MPC and ZKP against linkability and observability.
16 August 2024Overview · Mobile Security · Privacy & Crypto Analysis of the Permission System of Android Android controls app access to camera, location and contacts through permissions – how this system is built and changed across versions.
17 June 2024Analysis · Mobile Security · Privacy & Crypto Analysis of the Android Privacy Sandbox Android's SDK Runtime is meant to isolate ad libraries from apps – which data for device fingerprinting remains accessible?
14 June 2024Analysis · Privacy & Crypto · Web & Cloud Evaluation of Secure-Multi-Party-Computation-Frameworks for the Web Browser MPC right in the web browser: the report examines current approaches and compares the JIFF and MPyC-Web frameworks for practical use.
29 April 2024Concept · Digital Identity · Privacy & Crypto Service Provider Accreditation with Attribute Constraints Accredited service providers should only request the attributes they can justify with evidence, in line with privacy and the GDPR.
5 March 2024Overview · Privacy & Crypto Evaluation of MPC’s State of the Art MPC enables data analysis across sources while preserving privacy; the report surveys frameworks, threat models and use cases.
22 January 2024Overview · Privacy & Crypto · Mobile Security Evaluating the “Secure Aggregation” Aspect in Privacy-Preserving “Federated Machine Learning” Secure aggregation keeps individual devices' model updates private in federated learning; the report compares SecAgg and three successors.
29 December 2023Analysis · Mobile Security · Privacy & Crypto Analysis of the Android Health Connect Programming Interface How apps access health data on Android via Health Connect, and how much control users have over that access.
21 December 2023Concept · Digital Identity · Privacy & Crypto Identity Recovery in Case of Device Loss How can identities and keys stored in a TEE be securely backed up and restored when the device is lost?
1 December 2023Analysis · Mobile Security · Privacy & Crypto Reducing the Fingerprintability of Android Smartphones Automatically generated app patches align device information on Android to reduce fingerprinting, without changing the device itself.
25 August 2023Concept · Privacy & Crypto · Transparency Access Control for Distributed Data Analysis using Secure Multi-party Computation Access control for multi-party computation: users keep control over their data, and only authorised users see the result.
29 April 2023Overview · AI · Privacy & Crypto Theoretical analysis of the approach to the development of AI-based services Secure development is not yet established for AI; this analysis compares the security requirements of no-, low- and high-code approaches.
28 April 2023Analysis · Mobile Security · Privacy & Crypto Comparison of the Fingerprintability of Android and iOS Apps can still fingerprint devices despite restricted identifiers; which information sources do Android and iOS offer for this?
28 April 2023Analysis · Mobile Security · Privacy & Crypto Privacy comparison between paid and free apps A comparison of permissions and data safety declarations shows whether paid Android apps offer better privacy than free ones.
18 April 2023Concept · Digital Identity · Privacy & Crypto Privacy enhancements for flexible access control policies Access checks often reveal more personal data than needed; this project integrates privacy-preserving technologies into a policy system.
15 February 2023Analysis · Mobile Security · Privacy & Crypto Detecting Inconsistencies between Android App Descriptions and Permissions A Transformer model checks whether Android app descriptions justify the requested permissions, based on 46,000+ app descriptions.
