{"id":"https://openalex.org/W7163515387","doi":"https://doi.org/10.1145/3779208.3807480","title":"The Insider's Advantage: Exploiting Automated Privacy Policy Analyzer Tools Through Subtle Text Manipulations","display_name":"The Insider's Advantage: Exploiting Automated Privacy Policy Analyzer Tools Through Subtle Text Manipulations","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163515387","doi":"https://doi.org/10.1145/3779208.3807480"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3807480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807480","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3807480","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051622024","display_name":"Tanusree Das Tithy","orcid":null},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tanusree Das Tithy","raw_affiliation_strings":["Department of Computer Science and Engineering, Cyber Guard Research Lab, The University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0009-0003-1222-6621","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Cyber Guard Research Lab, The University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049618010","display_name":"Poojitha Thota","orcid":null},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Poojitha Thota","raw_affiliation_strings":["Department of Computer Science and Engineering, Security and Privacy Research Lab, The University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0000-0003-3744-4847","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Security and Privacy Research Lab, The University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076332929","display_name":"Shirin Nilizadeh","orcid":"https://orcid.org/0000-0002-0539-3742"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shirin Nilizadeh","raw_affiliation_strings":["Department of Computer Science and Engineering, Security and Privacy Research Lab, The University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-0539-3742","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Security and Privacy Research Lab, The University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012792160","display_name":"Faysal Hossain Shezan","orcid":"https://orcid.org/0000-0002-1649-0978"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Faysal Hossain Shezan","raw_affiliation_strings":["Department of Computer Science and Engineering, Cyber Guard Research Lab, The University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-1649-0978","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Cyber Guard Research Lab, The University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I189196454"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.62456112,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1667","last_page":"1683"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.20489999651908875,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.20489999651908875,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.14429999887943268,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13910","display_name":"Computational and Text Analysis Methods","score":0.09920000284910202,"subfield":{"id":"https://openalex.org/subfields/3300","display_name":"General Social Sciences"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/readability","display_name":"Readability","score":0.9077000021934509},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8414999842643738},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7099000215530396},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.4113999903202057},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3790999948978424},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.37290000915527344}],"concepts":[{"id":"https://openalex.org/C2778143727","wikidata":"https://www.wikidata.org/wiki/Q1820650","display_name":"Readability","level":2,"score":0.9077000021934509},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8414999842643738},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7868000268936157},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7099000215530396},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45190000534057617},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.4113999903202057},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.38769999146461487},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3790999948978424},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34290000796318054},{"id":"https://openalex.org/C158007255","wikidata":"https://www.wikidata.org/wiki/Q1055222","display_name":"Spectrum analyzer","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28139999508857727},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2768999934196472},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.25450000166893005},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3807480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807480","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3807480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807480","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7828640341758728,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G6192170406","display_name":"Collaborative Research: EAGER: FDASS: Protect Intellectual Property of Software Code in the Age of Generative AI","funder_award_id":"2532587","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6690724615","display_name":"CAREER: Advancing Adversarial Robustness of Natural Language Generation Systems","funder_award_id":"2239646","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1981159181","https://openalex.org/W2101105183","https://openalex.org/W2251291091","https://openalex.org/W2517394750","https://openalex.org/W2799007037","https://openalex.org/W2799194071","https://openalex.org/W2950733407","https://openalex.org/W2962818281","https://openalex.org/W2963341956","https://openalex.org/W2963969878","https://openalex.org/W2970078867","https://openalex.org/W2970449623","https://openalex.org/W2982054702","https://openalex.org/W2983309655","https://openalex.org/W3015001695","https://openalex.org/W3035164976","https://openalex.org/W3082426877","https://openalex.org/W3103585424","https://openalex.org/W3103934057","https://openalex.org/W3104423855","https://openalex.org/W3136312332","https://openalex.org/W3153947101","https://openalex.org/W3155936402","https://openalex.org/W3158376304","https://openalex.org/W3174318528","https://openalex.org/W3174848559","https://openalex.org/W3176393001","https://openalex.org/W3176409842","https://openalex.org/W3176648901","https://openalex.org/W3177190797","https://openalex.org/W3197868468","https://openalex.org/W3198690080","https://openalex.org/W3214522776","https://openalex.org/W4245267204","https://openalex.org/W4285288517","https://openalex.org/W4312641524","https://openalex.org/W4385412479","https://openalex.org/W4385572293","https://openalex.org/W4385573584","https://openalex.org/W4388867280","https://openalex.org/W4389519492","https://openalex.org/W4389520467","https://openalex.org/W4404781133"],"related_works":[],"abstract_inverted_index":{"Privacy":[0],"policies":[1],"are":[2],"essential":[3],"for":[4,77,174],"communicating":[5],"data":[6],"practices":[7],"to":[8,65,90,103,116,206],"users,":[9],"despite":[10],"their":[11,208],"dense,":[12],"complex":[13],"language,":[14],"which":[15],"often":[16],"obstructs":[17],"comprehension.":[18],"Automated":[19],"Policy":[20],"Analyzer":[21],"Tools":[22],"(APATs)":[23],"and":[24,44,113,139,162,177,188,201],"recent":[25],"advancements":[26],"in":[27,35,106,167,199],"Large":[28],"Language":[29],"Models":[30],"(LLMs)":[31],"have":[32],"made":[33],"strides":[34],"simplifying":[36],"these":[37,50],"documents":[38],"through":[39],"features":[40],"such":[41],"as":[42],"question-answering":[43],"summarization.":[45],"However,":[46],"the":[47,79,121,147,203],"robustness":[48,80],"of":[49,81,86,149],"tools":[51,143],"against":[52,83],"adversarial":[53,172],"manipulations":[54],"remains":[55],"less":[56],"explored.":[57],"This":[58],"study":[59,157],"examines":[60],"how":[61],"subtle,":[62],"organization-side":[63],"modifications":[64,185],"policy":[66,117,141],"text":[67],"can":[68,101],"mislead":[69],"APATs.":[70],"We":[71,97],"present":[72],"APATRA,":[73],"a":[74,84],"multi-level":[75],"framework":[76],"assessing":[78],"APATs":[82,200],"range":[85],"policy-specific":[87],"attacks":[88],"designed":[89],"manipulate":[91],"them":[92],"into":[93],"generating":[94],"misleading":[95],"outputs.":[96],"uncover":[98],"vulnerabilities":[99],"that":[100,183],"lead":[102],"substantial":[104],"errors":[105],"outputs":[107],"by":[108],"applying":[109],"character-,":[110],"word-,":[111],"phrase-,":[112],"sentence-level":[114],"perturbations":[115],"contexts":[118],"while":[119],"preserving":[120],"original":[122],"information.":[123],"Our":[124],"evaluation":[125],"spans":[126],"policy-specialized":[127],"models":[128],"(PolicyQA,":[129],"PrivBERT),":[130],"state-of-the-art":[131],"LLMs":[132],"(LLama-4-Maverick,":[133],"GPT-3.5,":[134],"GPT-4,":[135],"GPT-5-mini,":[136],"Claude-3.5,":[137],"Claude-4.6-Sonnet),":[138],"third-party":[140],"analyzer":[142],"(AesirX).":[144],"To":[145],"validate":[146],"subtlety":[148],"our":[150,184,193],"attacks,":[151],"we":[152],"conducted":[153],"an":[154],"IRB-approved":[155],"user":[156],"with":[158],"100":[159],"general":[160],"participants":[161],"10":[163],"legal":[164],"experts":[165],"specializing":[166],"privacy":[168],"law,":[169],"who":[170],"assessed":[171],"excerpts":[173],"grammaticality,":[175],"contradictions,":[176],"logical":[178],"flow.":[179],"Their":[180],"evaluations":[181],"demonstrate":[182],"maintain":[186],"readability":[187],"raise":[189],"no":[190],"concerns.":[191],"Overall,":[192],"results":[194],"reveal":[195],"critical":[196],"security":[197],"gaps":[198],"underscore":[202],"urgent":[204],"need":[205],"enhance":[207],"robustness.":[209]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-06-05T00:00:00"}