@article{ZONG2026, 
author = {Rui ZONG and Jian XU},
title = {RISK WARNING ALGORITHM FOR OVER-COLLECTION OF PERSONAL INFORMATION IN APP FORMAL PROGRAM},
year = {2026},
journal = {Physics and Engineering},
volume = {46},
number = {4},
pages = {396-401},
keywords = {multi-dimensional feature extraction, risk quantification, excessive collection of personal information, App formal program, risk classification alarm},
url = {https://www.sciopen.com/article/10.26599/PHYS.2026.9320457},
doi = {10.26599/PHYS.2026.9320457},
abstract = {To address the issues of large quantization errors in personal information over-collection risk and low precision in alarm level classification, this study proposes a formal program personal information over-collection risk alarm algorithm for Apps. Multi-source heterogeneous data of Apps (static data, dynamic behavior data, etc.) are obtained and transformed into an initial feature space through formal parsing of policy texts, permission-information type mapping, and dynamic behavior vectorization. Multi-dimensional features of App formal programs are extracted, based on which the personal information over-collection risk factors are calculated-personal information sensitivity, personal information collection behavior abnormality, and personal information collection behavior compliance deviation. The personal inform mation over-collection risk quantization result is calculated through a generalized linear model and Sigmoid function. According to the distribution of personal information over-collection risk quantization results, adaptive thresholds are determined and a graded alarm mechanism for personal information over-collection risk is established, thereby achieving the research objectives. Experimental results show that the maximum cosine similarity between the multi-dimensional feature vectors of App formal programs extracted by the designed algorithm and the actual feature vectors reached 0.95, the minimum quantization error of personal information over-collection risk reached 1%, and the personal information over-collection risk alarm level classification results were identical to the annotated alarm level results of the experimental samples.}
}