2021 Inria and the CNIL award: European researchers awarded for their work on privacy protection

24 May 2022

At the 15th  international Computers Privacy and Data Protection (CPDP) conference, the Privacy Award was presented to Joel Reardon, Álvaro Feal, Primal Wijesekera, Amit Elazari Bar On, Narseo Vallina-Rodriguez and Serge Egelman for their article "50 Ways to Leak Your Data: An Exploration of Apps' Circumvention of the Android Permissions System".

On 24 May 2022, the co-presidents of the CNIL-Inria Prize Jury, François Pellegrini and Mathieu Cunche, gave the awarded the privacy prize to a Spanish-American research team for their paper "50 Ways to Leak Your Data: An Exploration of Apps' Circumvention of the Android Permissions System". Presented in 2019 at the Unsenix Security conference, this article meticulously analyses how apps on Android circumvent operating system protections and access information without users' knowledge or even against their choices.

The Federal Trade Commission has initiated a 2021 action regarding one of the circumvention methods presented in the article and the actors involved. The award-winning research team's work therefore had a significant impact on the protection of individuals' data.

As such, the jury considered the results presented by this research team to be of great interest to the general public, but also to policy makers, regulators and all stakeholders in the ecosystem.

The jury also wanted to distinguish the runner-up paper: "DatashareNetwork: A Decentralized Privacy-Preserving Search Engine for Investigative Journalists" by Kasra Edalatnejad, Wouter Lueks, Julien Pierre Martin, Soline Ledésert, Anne L'Hôte, Bruno Thomas, Laurent Girod and Carmela Troncoso. This article is based on collaboration with journalists to identify their needs in terms of tools to search for documents within a limited timeframe and while ensuring the confidentiality of the search.

About the CNIL - Inria Data Protection Award

Each year, this prize rewards teams of researchers located at least partly in the European Union who are working to improve the protection of personal data or privacy. Through the recognition of research, it helps to make data protection issues and solutions more visible to the general public. Finally, it offers the opportunity to raise awareness of the scientific community and decision-makers on the subject of data protection.

Acknowledgements

To award the 2022 prize, the CNIL and Inria relied on a jury of 22 internationally recognized researchers whom we would like to thank sincerely for their investment and the time they devoted to evaluating the numerous articles received: