{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,3]],"date-time":"2025-12-03T18:02:30Z","timestamp":1764784950816,"version":"3.40.3"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783031175503"},{"type":"electronic","value":"9783031175510"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-17551-0_35","type":"book-chapter","created":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T13:25:48Z","timestamp":1664457948000},"page":"541-556","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["TraceDroid: A Robust Network Traffic Analysis Framework for\u00a0Privacy Leakage in\u00a0Android Apps"],"prefix":"10.1007","author":[{"given":"Huajun","family":"Cui","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guozhu","family":"Meng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weiping","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dali","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ting","family":"Su","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaodong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuejun","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,9,30]]},"reference":[{"key":"35_CR1","unstructured":"https:\/\/developer.android.com\/reference\/java\/net\/HttpURLConnection (2021)"},{"key":"35_CR2","unstructured":"https:\/\/developer.android.google.cn\/about\/versions\/marshmallow\/android-6.0-changes?skip_cache=false (2021)"},{"key":"35_CR3","unstructured":"Async-http (2021). https:\/\/github.com\/android-async-http\/android-async-http"},{"key":"35_CR4","unstructured":"AutoClick (2021). https:\/\/github.com\/BlcDle\/AutoClick"},{"key":"35_CR5","unstructured":"BroingSSL (2021). https:\/\/boringssl.googlesource.com\/boringssl\/"},{"key":"35_CR6","doi-asserted-by":"crossref","unstructured":"Caputo, D., Pagano, F., Bottino, G., Verderame, L., Merlo, A.: You can\u2019t always get what you want: towards user-controlled privacy on android. arXiv preprint arXiv:2106.02483 (2021)","DOI":"10.1109\/TDSC.2022.3146020"},{"key":"35_CR7","unstructured":"Charles (2021). https:\/\/www.charlesproxy.com\/"},{"key":"35_CR8","doi-asserted-by":"crossref","unstructured":"Dong, F., et al.: Frauddroid: automated ad fraud detection for android apps. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp. 257\u2013268 (2018)","DOI":"10.1145\/3236024.3236045"},{"key":"35_CR9","doi-asserted-by":"crossref","unstructured":"Dong, F., Wang, H., Li, L., Guo, Y., Xu, G., Zhang, S.: How do mobile apps violate the behavioral policy of advertisement libraries? In: Proceedings of the 19th International Workshop on Mobile Computing Systems & Applications, pp. 75\u201380 (2018)","DOI":"10.1145\/3177102.3177113"},{"key":"35_CR10","unstructured":"Fiddler (2021). https:\/\/www.telerik.com\/fiddler"},{"key":"35_CR11","unstructured":"HttpClient (2021). https:\/\/hc.apache.org\/httpcomponents-client-5.1.x\/"},{"key":"35_CR12","doi-asserted-by":"crossref","unstructured":"Li, L., et al.: ICCTA: detecting inter-component privacy leaks in android apps. In: 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering, vol. 1, pp. 280\u2013291. IEEE (2015)","DOI":"10.1109\/ICSE.2015.48"},{"issue":"6","key":"35_CR13","doi-asserted-by":"publisher","first-page":"1269","DOI":"10.1109\/TIFS.2017.2656460","volume":"12","author":"L Li","year":"2017","unstructured":"Li, L., Li, D., Bissyand\u00e9, T.F., Klein, J., Le Traon, Y., Lo, D., Cavallaro, L.: Understanding android app piggybacking: a systematic study of malicious code grafting. IEEE Trans. Inf. Forensics Secur. 12(6), 1269\u20131284 (2017)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"35_CR14","doi-asserted-by":"crossref","unstructured":"Li, M., et al.: Libd: scalable and precise third-party library detection in android markets. In: 2017 IEEE\/ACM 39th International Conference on Software Engineering (ICSE), pp. 335\u2013346. IEEE (2017)","DOI":"10.1109\/ICSE.2017.38"},{"key":"35_CR15","unstructured":"LibRadar (2021). https:\/\/github.com\/pkumza\/LibRadar"},{"key":"35_CR16","doi-asserted-by":"crossref","unstructured":"Liu, T., Wang, H., Li, L., Bai, G., Guo, Y., Xu, G.: Dapanda: detecting aggressive push notifications in android apps. In: 2019 34th IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp. 66\u201378. IEEE (2019)","DOI":"10.1109\/ASE.2019.00017"},{"key":"35_CR17","doi-asserted-by":"crossref","unstructured":"Liu, T., et al.: Maddroid: characterizing and detecting devious ad contents for android apps. In: Proceedings of The Web Conference 2020, pp. 1715\u20131726 (2020)","DOI":"10.1145\/3366423.3380242"},{"key":"35_CR18","unstructured":"Lumen (2021). https:\/\/www.haystack.mobi\/"},{"key":"35_CR19","doi-asserted-by":"crossref","unstructured":"Ma, Z., Wang, H., Guo, Y., Chen, X.: Libradar: fast and accurate detection of third-party libraries in android apps. In: Proceedings of the 38th International Conference on Software Engineering Companion, pp. 653\u2013656 (2016)","DOI":"10.1145\/2889160.2889178"},{"key":"35_CR20","unstructured":"Meddle (2021). https:\/\/meddle.mobi\/"},{"key":"35_CR21","unstructured":"Okhttp: https:\/\/square.github.io\/okhttp\/ (May 2021)"},{"key":"35_CR22","unstructured":"OpenFeign (2021). https:\/\/github.com\/OpenFeign\/feign"},{"key":"35_CR23","unstructured":"Razaghpanah, A., et al.: Haystack: In situ mobile traffic analysis in user space, pp. 1\u201313. arXiv preprint arXiv:1510.01419 (2015)"},{"key":"35_CR24","unstructured":"Reardon, J., Feal, \u00c1., Wijesekera, P., On, A.E.B., Vallina-Rodriguez, N., Egelman, S.: 50 ways to leak your data: an exploration of apps\u2019 circumvention of the android permissions system. In: 28th USENIX security symposium (USENIX security 2019), pp. 603\u2013620 (2019)"},{"key":"35_CR25","unstructured":"Ren, J., Rao, A., Lindorfer, M., Legout, A., Choffnes, D.: Recon: revealing and controlling pii leaks in mobile network traffic. In: Proceedings of the 14th Annual International Conference on Mobile Systems, Applications, and Services, pp. 361\u2013374 (2016)"},{"key":"35_CR26","unstructured":"RestTemplate (2021). https:\/\/docs.spring.io\/spring-framework\/docs\/current\/javadoc-api\/org\/springframework\/web\/client\/RestTemplate.html"},{"key":"35_CR27","unstructured":"Retrofit (2021). https:\/\/square.github.io\/retrofit\/"},{"key":"35_CR28","doi-asserted-by":"crossref","unstructured":"Soh, C., Tan, H.B.K., Arnatovich, Y.L., Narayanan, A., Wang, L.: Libsift: automated detection of third-party libraries in android applications. In: 2016 23rd Asia-Pacific Software Engineering Conference (APSEC), pp. 41\u201348. IEEE (2016)","DOI":"10.1109\/APSEC.2016.017"},{"issue":"1","key":"35_CR29","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1109\/TIFS.2017.2737970","volume":"13","author":"VF Taylor","year":"2017","unstructured":"Taylor, V.F., Spolaor, R., Conti, M., Martinovic, I.: Robust smartphone app identification via encrypted network traffic analysis. IEEE Trans. Inf. Forensics Secur. 13(1), 63\u201378 (2017)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"35_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1007\/978-3-642-36516-4_7","volume-title":"Passive and Active Measurement","author":"A Tongaonkar","year":"2013","unstructured":"Tongaonkar, A., Dai, S., Nucci, A., Song, D.: Understanding mobile app usage patterns using in-app advertisements. In: Roughan, M., Chang, R. (eds.) PAM 2013. LNCS, vol. 7799, pp. 63\u201372. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-36516-4_7"},{"key":"35_CR31","unstructured":"Volley (2021). https:\/\/developer.android.com\/training\/volley\/index.html\/"},{"key":"35_CR32","doi-asserted-by":"crossref","unstructured":"Wang, H., et al.: Beyond google play: a large-scale comparative study of Chinese android app markets. In: Proceedings of the Internet Measurement Conference 2018, pp. 293\u2013307 (2018)","DOI":"10.1145\/3278532.3278558"},{"key":"35_CR33","unstructured":"Wang, J., et al.: Understanding malicious cross-library data harvesting on android. In: 30th USENIX Security Symposium (USENIX Security 2021), pp. 4133\u20134150 (2021)"},{"key":"35_CR34","doi-asserted-by":"publisher","first-page":"67602","DOI":"10.1109\/ACCESS.2019.2918139","volume":"7","author":"W Wang","year":"2019","unstructured":"Wang, W., et al.: Constructing features for detecting android malicious applications: issues, taxonomy and directions. IEEE Access 7, 67602\u201367631 (2019)","journal-title":"IEEE Access"},{"key":"35_CR35","doi-asserted-by":"crossref","unstructured":"Wang, Y., Wu, H., Zhang, H., Rountev, A.: Orlis: obfuscation-resilient library detection for android. In: 2018 IEEE\/ACM 5th International Conference on Mobile Software Engineering and Systems (MOBILESoft), pp. 13\u201323. IEEE (2018)","DOI":"10.1145\/3197231.3197248"},{"key":"35_CR36","unstructured":"XiaoMi: Xiaomi app store (2021). https:\/\/app.mi.com\/"},{"key":"35_CR37","doi-asserted-by":"crossref","unstructured":"Xu, Q., Erman, J., Gerber, A., Mao, Z., Pang, J., Venkataraman, S.: Identifying diverse usage behaviors of smartphone apps. In: Proceedings of the 2011 ACM SIGCOMM Conference on Internet Measurement Conference, pp. 329\u2013344 (2011)","DOI":"10.1145\/2068816.2068847"},{"key":"35_CR38","doi-asserted-by":"crossref","unstructured":"Yang, Z., Yang, M., Zhang, Y., Gu, G., Ning, P., Wang, X.S.: Appintent: analyzing sensitive data transmission in android for privacy leakage detection. In: Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, pp. 1043\u20131054 (2013)","DOI":"10.1145\/2508859.2516676"},{"key":"35_CR39","doi-asserted-by":"crossref","unstructured":"Zhan, X., et al.: Automated third-party library detection for android applications: are we there yet? In: 2020 35th IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp. 919\u2013930. IEEE (2020)","DOI":"10.1145\/3324884.3416582"},{"key":"35_CR40","doi-asserted-by":"crossref","unstructured":"Zungur, O., Stringhini, G., Egele, M.: Libspector: context-aware large-scale network traffic analysis of android applications. In: 2020 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 318\u2013330. IEEE (2020)","DOI":"10.1109\/DSN48063.2020.00048"}],"container-title":["Lecture Notes in Computer Science","Science of Cyber Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-17551-0_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,29]],"date-time":"2022-09-29T13:31:53Z","timestamp":1664458313000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-17551-0_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031175503","9783031175510"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-17551-0_35","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"30 September 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SciSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Science of Cyber Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Matsue","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 August 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 August 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"scisec2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.scisec.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"15","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"50% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3 Posters","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}