T/CAAAD 002-2024 Internet advertising automation tool security evaluation specification

Scope

Main technical content: In order to meet the demand for standard documents in the development of information and communication, this document is jointly formulated by the China Communications Standards Association and the China Advertising Association, and is recommended for adoption by relevant parties. Suggestions and opinions on this document should be reflected to the China Communications Standards Association and the China Advertising Association. In recent years, with the popularity of mobile intelligent terminal devices, the increase in cumulative access traffic of the mobile Internet, and the increase in mobile Internet users, Internet marketing has also been migrating from the PC side to the mobile side, forming a new mode of mobile Internet advertising. In the field of mobile Internet advertising, services such as ad display, mobile attribution, ad monitoring, and marketing analysis can all be completed through third-party automation toolkits based on SDKs, but there are still many problems with third-party automation toolkits. The development of third-party automation toolkits often focuses on improving functionality, but invests less in security. Moreover, since third-party automation toolkits are widely used in a large number of apps, the scope of the impact of vulnerabilities is very large. At the same time, some third-party automation toolkits hide the collection of users' personal information, indirectly causing app violations and even being directly removed from the app store. Although it is the problem of third-party automation toolkits, it is ultimately the general users and app developers who pay the price. In order to solve the industry's pain points, improve the security of third-party automation toolkits, and help app developers evaluate the security of third-party automation toolkits, it is necessary to formulate safety evaluation standards for third-party automation toolkits in Internet advertising.

Development Information

Related Standards