{"id":"https://openalex.org/W4414600778","doi":"https://doi.org/10.1007/s10586-025-05624-2","title":"Comprehensive AI-driven privacy risk assessment in mobile apps and social networks","display_name":"Comprehensive AI-driven privacy risk assessment in mobile apps and social networks","publication_year":2025,"publication_date":"2025-09-29","ids":{"openalex":"https://openalex.org/W4414600778","doi":"https://doi.org/10.1007/s10586-025-05624-2"},"language":"en","primary_location":{"id":"doi:10.1007/s10586-025-05624-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-025-05624-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-025-05624-2.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10586-025-05624-2.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116420619","display_name":"Daniel Blanco-Aza","orcid":null},"institutions":[{"id":"https://openalex.org/I178450904","display_name":"Universidad Nacional de Educaci\u00f3n a Distancia","ror":"https://ror.org/02msb5n36","country_code":"ES","type":"education","lineage":["https://openalex.org/I178450904"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Daniel Blanco-Aza","raw_affiliation_strings":["Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain","institution_ids":["https://openalex.org/I178450904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046821670","display_name":"Antonio Robles-G\u00f3mez","orcid":"https://orcid.org/0000-0002-5181-0199"},"institutions":[{"id":"https://openalex.org/I178450904","display_name":"Universidad Nacional de Educaci\u00f3n a Distancia","ror":"https://ror.org/02msb5n36","country_code":"ES","type":"education","lineage":["https://openalex.org/I178450904"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Antonio Robles-G\u00f3mez","raw_affiliation_strings":["Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain","institution_ids":["https://openalex.org/I178450904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079677624","display_name":"Rafael Vargas","orcid":"https://orcid.org/0000-0002-4089-9538"},"institutions":[{"id":"https://openalex.org/I178450904","display_name":"Universidad Nacional de Educaci\u00f3n a Distancia","ror":"https://ror.org/02msb5n36","country_code":"ES","type":"education","lineage":["https://openalex.org/I178450904"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael Pastor-Vargas","raw_affiliation_strings":["Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain","institution_ids":["https://openalex.org/I178450904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056271706","display_name":"Llanos Tobarra","orcid":"https://orcid.org/0000-0003-2779-4042"},"institutions":[{"id":"https://openalex.org/I178450904","display_name":"Universidad Nacional de Educaci\u00f3n a Distancia","ror":"https://ror.org/02msb5n36","country_code":"ES","type":"education","lineage":["https://openalex.org/I178450904"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Llanos Tobarra","raw_affiliation_strings":["Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departamento de Sistemas de Comunicaci\u00f3n y Control, ETSI Inform\u00e1tica, Universidad Nacional de Educaci\u00f3n a Distancia (UNED), Madrid, Spain","institution_ids":["https://openalex.org/I178450904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116420620","display_name":"Pedro Vidal-Balboa","orcid":null},"institutions":[{"id":"https://openalex.org/I4210120075","display_name":"Hospital El Bierzo","ror":"https://ror.org/028d75n58","country_code":"ES","type":"healthcare","lineage":["https://openalex.org/I4210120075"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Pedro Vidal-Balboa","raw_affiliation_strings":["Consorcio CA UNED en Ponferrada/INTECCA, Ponferrada, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Consorcio CA UNED en Ponferrada/INTECCA, Ponferrada, Spain","institution_ids":["https://openalex.org/I4210120075"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005602255","display_name":"Mariano M\u00e9ndez-Su\u00e1rez","orcid":"https://orcid.org/0000-0002-6018-6463"},"institutions":[{"id":"https://openalex.org/I894721429","display_name":"EAE Business School","ror":"https://ror.org/03qzktr95","country_code":"ES","type":"education","lineage":["https://openalex.org/I894721429"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mariano M\u00e9ndez-Su\u00e1rez","raw_affiliation_strings":["ESIC University, ESIC Business & Marketing School, Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ESIC University, ESIC Business & Marketing School, Madrid, Spain","institution_ids":["https://openalex.org/I894721429"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5116420619"],"corresponding_institution_ids":["https://openalex.org/I178450904"],"apc_list":{"value":2790,"currency":"USD","value_usd":2790},"apc_paid":{"value":2790,"currency":"USD","value_usd":2790},"fwci":0.642,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.713138,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"28","issue":"14","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.7063999772071838},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.6032999753952026},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.5374000072479248},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.5175999999046326},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.47429999709129333},{"id":"https://openalex.org/keywords/data-sharing","display_name":"Data sharing","score":0.4636000096797943},{"id":"https://openalex.org/keywords/privacy-software","display_name":"Privacy software","score":0.4156000018119812},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.39899998903274536},{"id":"https://openalex.org/keywords/general-data-protection-regulation","display_name":"General Data Protection Regulation","score":0.37929999828338623}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.822700023651123},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.7063999772071838},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.6032999753952026},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.5374000072479248},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5292999744415283},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.5175999999046326},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.47429999709129333},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.4636000096797943},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.462799996137619},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.4156000018119812},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.39899998903274536},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.37929999828338623},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.36880001425743103},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.3662000000476837},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C4727928","wikidata":"https://www.wikidata.org/wiki/Q17164759","display_name":"Social network (sociolinguistics)","level":3,"score":0.3513999879360199},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3465000092983246},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C2776945810","wikidata":"https://www.wikidata.org/wiki/Q17006654","display_name":"Data anonymization","level":3,"score":0.29319998621940613},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.28200000524520874},{"id":"https://openalex.org/C141972696","wikidata":"https://www.wikidata.org/wiki/Q1247836","display_name":"Privacy law","level":4,"score":0.2646999955177307},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2549000084400177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10586-025-05624-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-025-05624-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-025-05624-2.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10586-025-05624-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-025-05624-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-025-05624-2.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320323261","display_name":"Universidad Nacional de Educaci\u00f3n a Distancia","ror":"https://ror.org/02msb5n36"},{"id":"https://openalex.org/F4320327970","display_name":"Instituto Nacional de Ciberseguridad","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414600778.pdf","grobid_xml":"https://content.openalex.org/works/W4414600778.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2152126085","https://openalex.org/W2792626313","https://openalex.org/W2804002198","https://openalex.org/W2940477855","https://openalex.org/W3135366809","https://openalex.org/W4206303869","https://openalex.org/W4292387188","https://openalex.org/W4308411435","https://openalex.org/W4384304731","https://openalex.org/W4384693131","https://openalex.org/W4385412382","https://openalex.org/W4388867280","https://openalex.org/W4407938236","https://openalex.org/W6963731267"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1,125],"pervasive":[2],"use":[3],"of":[4,22,97,102,191],"mobile":[5,47],"applications":[6],"and":[7,20,42,49,68,78,95,100,113,118,122,137,146,158,164,168,180,196,211,219,233],"social":[8,50],"networks":[9],"has":[10],"intensified":[11],"privacy":[12,44,81,98,148,161,193,223,236],"concerns":[13],"due":[14],"to":[15,38,72,109,144,177,221],"the":[16,59,189],"widespread":[17],"collection,":[18],"processing,":[19],"sharing":[21],"personal":[23],"data.":[24],"To":[25],"address":[26],"these":[27],"challenges,":[28],"we":[29],"introduce":[30],"SafeMountain":[31,65,183,227],",":[32],"a":[33,141],"novel":[34],"AI-driven":[35],"framework":[36,126],"designed":[37],"systematically":[39],"quantify,":[40],"evaluate,":[41],"visualize":[43,147],"risks":[45,224],"in":[46],"apps":[48],"platforms,":[51],"ensuring":[52],"strict":[53],"compliance":[54,209],"with":[55,134],"international":[56,135],"regulations,":[57],"particularly":[58],"General":[60],"Data":[61],"Protection":[62],"Regulation":[63],"(GDPR).":[64],"combines":[66],"static":[67],"dynamic":[69],"code":[70],"analyses":[71],"scrutinize":[73],"real-world":[74],"data":[75,123,212,235],"handling":[76],"practices":[77,237],"detect":[79],"potential":[80,120],"breaches.":[82],"It":[83],"also":[84],"employs":[85],"advanced":[86],"Natural":[87],"Language":[88],"Processing":[89],"(NLP)":[90],"techniques":[91],"for":[92],"automated":[93],"interpretation":[94],"evaluation":[96],"policies":[99],"Terms":[101],"Service.":[103],"By":[104,200],"mapping":[105],"textual":[106],"policy":[107,207],"disclosures":[108],"actual":[110],"app":[111],"permissions":[112],"behaviors,":[114],"it":[115,215],"identifies":[116],"discrepancies":[117],"highlights":[119],"non-compliance":[121],"misuse.":[124],"introduces":[127],"an":[128,170],"objective":[129],"risk":[130,151,166,194],"scoring":[131,195],"mechanism":[132],"aligned":[133],"standards":[136],"regulatory":[138,165],"requirements,":[139],"offering":[140],"structured":[142],"methodology":[143],"classify":[145],"risks.":[149],"This":[150],"assessment":[152],"spans":[153],"multiple":[154],"dimensions":[155],"(predictability,":[156],"manageability,":[157],"disassociability)":[159],"leveraging":[160],"engineering":[162],"principles":[163],"factors,":[167],"uses":[169],"intuitive":[171],"traffic-light":[172],"system":[173],"(Green,":[174],"Yellow,":[175],"Red)":[176],"enhance":[178],"transparency":[179],"user":[181],"comprehension.":[182],"addresses":[184],"major":[185],"research":[186],"gaps,":[187,210],"notably":[188],"absence":[190],"standardized":[192],"comprehensive":[197],"visualization":[198],"tools.":[199],"delivering":[201],"actionable":[202],"insights":[203],"into":[204],"permission":[205],"consistency,":[206],"transparency,":[208],"leakage":[213],"vulnerabilities,":[214],"empowers":[216],"users,":[217],"developers,":[218],"organizations":[220],"manage":[222],"proactively.":[225],"Ultimately,":[226],"fosters":[228],"trust":[229],"through":[230],"more":[231],"transparent":[232],"accountable":[234],"across":[238],"digital":[239],"ecosystems.":[240]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}