{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T20:50:58Z","timestamp":1791492658233,"version":"4.3.4"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319051482","type":"print"},{"value":"9783319051499","type":"electronic"}],"license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-05149-9_9","type":"book-chapter","created":{"date-parts":[[2014,3,7]],"date-time":"2014-03-07T09:36:27Z","timestamp":1394184987000},"page":"138-159","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":39,"title":["Bifocals: Analyzing WebView Vulnerabilities in Android Applications"],"prefix":"10.1007","author":[{"given":"Erika","family":"Chin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Wagner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2014,3,8]]},"reference":[{"key":"9_CR1","unstructured":"Adblock plus. http:\/\/adblockplus.org\/"},{"key":"9_CR2","unstructured":"AdMarvel. http:\/\/www.admarvel.com\/"},{"key":"9_CR3","unstructured":"Dashboards: Platform versions. http:\/\/web.archive.org\/web\/20130205234427\/\n                    http:\/\/developer.android.com\/about\/dashboards\/index.html"},{"key":"9_CR4","unstructured":"HTTP state management mechanism RFC. http:\/\/www.rfc-editor.org\/rfc\/rfc6265.txt"},{"key":"9_CR5","unstructured":"Malware delivered by Yahoo, Fox, Google ads. http:\/\/news.cnet.com\/8301-27080_3-20000898-245.html"},{"key":"9_CR6","unstructured":"Malware-infected WinRAR distributed through Google AdWords. http:\/\/www.zdnet.com\/blog\/security\/malware-infected-winrar-distributed-through-google-adwords\/2405"},{"key":"9_CR7","unstructured":"Medialets. http:\/\/www.medialets.com\/"},{"key":"9_CR8","unstructured":"Millennial media. http:\/\/www.millennialmedia.com\/"},{"key":"9_CR9","unstructured":"nsIContentPolicy. https:\/\/developer.mozilla.org\/en-US\/docs\/XPCOM_Interface_Reference\/nsIContentPolicy"},{"key":"9_CR10","unstructured":"Old Habits Die Hard: Cross-Zone Scripting in Dropbox & Google Drive Mobile Apps. http:\/\/blog.watchfire.com\/wfblog\/2012\/10\/old-habits-die-hard.html"},{"key":"9_CR11","unstructured":"Security Enhancements in Jelly Bean. http:\/\/android-developers.blogspot.com\/2013\/02\/security-enhancements-in-jelly-bean.html"},{"key":"9_CR12","unstructured":"Smali and baksmali. http:\/\/code.google.com\/p\/smali\/"},{"key":"9_CR13","unstructured":"Times web ads show security breach. http:\/\/www.nytimes.com\/2009\/09\/15\/technology\/internet\/15adco.html"},{"key":"9_CR14","doi-asserted-by":"crossref","unstructured":"Au, K.W.Y., Zhou, Y.F., Huang, Z., Gill, P., Lie, D.: Short paper: a look at smartphone permission models. In: Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices (2011)","DOI":"10.1145\/2046614.2046626"},{"key":"9_CR15","doi-asserted-by":"crossref","unstructured":"Batyuk, L., Herpich, M., Camtepe, S. A., Raddatz, K., Schmidt, A., Albayrak, S.: Using static analysis for automatic assessment and mitigation of unwanted and malicious activities within Android applications. In: Proceedings of the 6th International Conference on Malicious and Unwanted Software (MALWARE) (2011)","DOI":"10.1109\/MALWARE.2011.6112328"},{"issue":"6","key":"9_CR16","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/MSP.2004.111","volume":"2","author":"B. Chess","year":"2004","unstructured":"Chess, B., McGraw, G.: Static analysis for security. IEEE Security & Privacy. 2(6), 76\u201379 (2004)","journal-title":"IEEE Security & Privacy."},{"key":"9_CR17","doi-asserted-by":"crossref","unstructured":"Chin, E., Felt, A.P., Greenwood, K., Wagner, D.: Analyzing inter-application communication in Android. In: Proceedings of the Annual International Conference on Mobile Systems, Applications, and Services (2011)","DOI":"10.1145\/1999995.2000018"},{"key":"9_CR18","unstructured":"Di Lucca, G.A., Fasolino, A.R., Mastoianni, M., Tramontana, P.: Identifying cross site scripting vulnerabilities in web applications. In: Proceedings of the 6th IEEE International Workshop on Web Site Evolution (WSE) (2004)"},{"key":"9_CR19","unstructured":"Enck, W., Octeau, D., McDaniel, P., Chaudhuri, S.: A study of Android application security. In: Proceedings of the 20th USENIX Security Symposium (2011)"},{"key":"9_CR20","unstructured":"Endler, D.: The evolution of cross site scripting attacks. Whitepaper, iDefense Incorporation (2002)"},{"key":"9_CR21","doi-asserted-by":"crossref","unstructured":"Felt, A.P., Chin, E., Hanna, S., Song, D., Wagner, D.: Android permissions demystified. In: Proceedings of the ACM Conference on Computer and Communications, Security (2011)","DOI":"10.1145\/2046707.2046779"},{"key":"9_CR22","unstructured":"Felt, A.P., Wang, H., Moshchuk, A., Hanna, S., Chin, E.: Permission re-delegation: Attacks and defenses. In: Proceedings of the 20th USENIX Security Symposium (2011)"},{"key":"9_CR23","unstructured":"Fuchs, A.P., Chaudhuri, A., Foster, J.S.: SCanDroid: Automated security certification of Android applications. Technical report, University of Maryland (2009)"},{"key":"9_CR24","unstructured":"Grace, M., Zhou, Y., Wang, Z., Jiang, X.: Systematic detection of capability leaks in stock Android smartphones. In: Proceedings of the 19th Annual Symposium on Network and Distributed System, Security (2012)"},{"key":"9_CR25","unstructured":"Kanich, C., Chachra, N., McCoy, D., Grier, C., Wang, D.Y., Motoyama, M., Levchenko, K., Savage, S., Voelker, G.M.: No plan survives contact: Experience with cybercrime measurement. In: Proceedings of the 4th Conference on Cyber Security Experimentation and Test (2011)"},{"key":"9_CR26","unstructured":"Kim, J., Yoon, Y., Yi, K., Shin, J., Center, S.: ScanDal: Static analyzer for detecting privacy leaks in Android applications. In: Proceedings of the MoST (2012)"},{"key":"9_CR27","doi-asserted-by":"crossref","unstructured":"Kirda, E., Kruegel, C., Vigna, G., Jovanovic, N.: Noxes: A client-side solution for mitigating cross-site scripting attacks. In: Proceedings of the 2006 ACM Symposium on Applied, Computing (2006)","DOI":"10.1145\/1141277.1141357"},{"key":"9_CR28","unstructured":"Livshits, V.B., Lam, M.S.: Finding security vulnerabilities in Java applications with static analysis. In: Proceedings of the 14th Conference on USENIX Security Symposium (2005)"},{"key":"9_CR29","doi-asserted-by":"crossref","unstructured":"Luo, T., Hao, H., Du, W., Wang, Y., Yin, H.: Attacks on WebView in the Android system. In: Proceedings of the 27th Annual Computer Security Applications Conference (2011)","DOI":"10.1145\/2076732.2076781"},{"key":"9_CR30","doi-asserted-by":"crossref","unstructured":"Nikiforakis, N., Invernizzi, L., Kapravelos, A., Van Acker, S., Joosen, W., Kruegel, C., Piessens, F., Vigna, G.: You are what you include: Large-scale evaluation of remote JavaScript inclusions. In: Proceedings of the ACM Conference on Computer and Communications, Security (2012)","DOI":"10.1145\/2382196.2382274"},{"key":"9_CR31","unstructured":"Paller, G.: Dedexer. http:\/\/dedexer.sourceforge.net\/"},{"key":"9_CR32","doi-asserted-by":"crossref","unstructured":"Pearce, P., Felt, A.P., Nunez, G., Wagner, D.: AdDroid: Privilege separation for applications and advertisers in Android. In: Proceedings of AsiaCCS (2012)","DOI":"10.21236\/ADA584780"},{"key":"9_CR33","unstructured":"SC Magazine. WhiteHat: 90 percent of websites vulnerable to attack. http:\/\/www.scmagazine.com\/whitehat-90-percent-of-websites-vulnerable-to-attack\/article\/58066\/"},{"key":"9_CR34","doi-asserted-by":"crossref","unstructured":"Scandariato, R., Walden, J.: Predicting vulnerable classes in an Android application. In: Proceedings of the 4th International Workshop on Security Measurements and Metrics (2012)","DOI":"10.1145\/2372225.2372231"},{"key":"9_CR35","doi-asserted-by":"crossref","unstructured":"Schmidt, A.-D., Bye, R., Schmidt, H.-G., Clausen, J., Kiraz, O., Yuksel, K.A., Camtepe, S.A., Albayrak, S.: Static analysis of executables for collaborative malware detection on Android. In: Proceedings of International Conference on Communications (ICC) (2009)","DOI":"10.1109\/ICC.2009.5199486"},{"key":"9_CR36","unstructured":"Stack Overflow. Developer sites contradict each other regading webview-shouldoverrideurlloading. http:\/\/stackoverflow.com\/q\/10865788"},{"key":"9_CR37","unstructured":"Wagner, D., Foster, J.S., Brewer, E.A., Aiken, A.: A first step towards automated detection of buffer overrun vulnerabilities. In: Proceedings of Network and Distributed System Security Symposium (2000)"}],"container-title":["Lecture Notes in Computer Science","Information Security Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-05149-9_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,19]],"date-time":"2023-01-19T17:16:09Z","timestamp":1674148569000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-05149-9_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319051482","9783319051499"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-05149-9_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]},"assertion":[{"value":"8 March 2014","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}