{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T21:57:25Z","timestamp":1790805445181,"version":"4.1.0"},"publisher-location":"Cham","reference-count":47,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319240176","type":"print"},{"value":"9783319240183","type":"electronic"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-24018-3_12","type":"book-chapter","created":{"date-parts":[[2015,8,21]],"date-time":"2015-08-21T07:32:50Z","timestamp":1440142370000},"page":"187-202","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["How Current Android Malware Seeks to Evade Automated Code Analysis"],"prefix":"10.1007","author":[{"given":"Siegfried","family":"Rasthofer","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Irfan","family":"Asrar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stephan","family":"Huber","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2015,10,24]]},"reference":[{"key":"12_CR1","doi-asserted-by":"crossref","unstructured":"Anand, S., Naik, M., Harrold, M.J., Yang, H.: Automated concolic testing of smartphone apps. In: Proceedings of the ACM SIGSOFT 20th FSE, FSE 2012. ACM, New York (2012)","DOI":"10.1145\/2393596.2393666"},{"key":"12_CR2","doi-asserted-by":"crossref","unstructured":"Arzt, S., Huber, S., Rasthofer, S., Bodden, E.: Denial-of-app attack: inhibiting the installation of android apps on stock phones. In: Proceedings of the Fourth ACM SPSM Workshop. ACM, November 2014. \n                      https:\/\/github.com\/secure-software-engineering\/denial-of-app-attack","DOI":"10.1145\/2666620.2666621"},{"key":"12_CR3","doi-asserted-by":"crossref","unstructured":"Arzt, S., Rasthofer, S., Fritz, C., Bodden, E., Bartel, A., Klein, J., Le Traon, Y., Octeau, D., McDaniel, P.: Flowdroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. In: Proceedings of the 35th ACM SIGPLAN PLDI. ACM, June 2014","DOI":"10.1145\/2594291.2594299"},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Basin, D., M\u00f6dersheim, S., Vigano, L.: An on-the-fly model-checker for security protocol analysis. Springer (2003)","DOI":"10.1007\/978-3-540-39650-5_15"},{"key":"12_CR5","doi-asserted-by":"crossref","unstructured":"Bl\u00e4sing, T., Schmidt, A.-D., Batyuk, L., Camtepe, S.A., Albayrak, S.: An android application sandbox system for suspicious software detection. In: 5th International MALWARE 2010, Nancy, France","DOI":"10.1109\/MALWARE.2010.5665792"},{"key":"12_CR6","unstructured":"Castillo, C.: Phishing attack replaces android banking apps with malware, June 2013. Blog"},{"key":"12_CR7","unstructured":"Chen, Q.A., Qian, Z., Mao, Z.M.: Peeking into your app without actually seeing it: UI state inference and novel android attacks. In: Proceedings of the 23rd USENIX Security Symposium (2014)"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Choi, W., Necula, G., Sen, K.: Guided gui testing of android apps with minimal restart and approximate learning. In: Proceedings of the 2013 ACM SIGPLAN OOPSLA, OOPSLA 2013, New York, NY, USA (2013)","DOI":"10.1145\/2509136.2509552"},{"key":"12_CR9","unstructured":"International Data Corporation. Worldwide quarterly mobile phone tracker 3q12, November 2012. Blog"},{"key":"12_CR10","unstructured":"Android Developer. Application fundamentals, April 2015. \n                      http:\/\/developer.android.com\/guide\/components\/fundamentals.html"},{"key":"12_CR11","doi-asserted-by":"crossref","unstructured":"Dunham, K.: Android Malware and Analysis. CRC Press (2014)","DOI":"10.1201\/b17598"},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Feng, Y., Anand, S., Dillig, I., Aiken, A.: Apposcopy: semantics-based detection of android malware through static analysis. In: Proceedings of the 22Nd ACM SIGSOFT FSE, FSE 2014. ACM, New York (2014)","DOI":"10.1145\/2635868.2635869"},{"key":"12_CR13","unstructured":"Google. Android security 2014 year in review, April 2014"},{"key":"12_CR14","doi-asserted-by":"crossref","unstructured":"Hoffmann, J., Ussath, M., Holz, T., Spreitzenbarth, M.: Slicing droids: program slicing for smali code. In: Proceedings of the 28th Annual ACM SAC, SAC 2013, New York, NY, USA (2013)","DOI":"10.1145\/2480362.2480706"},{"key":"12_CR15","unstructured":"Hutchins, M., Foster, H., Goradia, T., Ostrand, T.: Experiments of the effectiveness of dataflow- and controlflow-based test adequacy criteria. In: Proceedings of the 16th ICSE, ICSE 1994, Los Alamitos, CA, USA (1994)"},{"key":"12_CR16","doi-asserted-by":"crossref","unstructured":"Inozemtseva, L., Holmes, R.: Coverage is not strongly correlated with test suite effectiveness. In: Proceedings of the 36th ICSE, ICSE 2014, New York, NY, USA (2014)","DOI":"10.1145\/2568225.2568271"},{"key":"12_CR17","unstructured":"Bitdefender LABS. Reveton \/ icepol ransomware moves to android. blog"},{"key":"12_CR18","unstructured":"McAfee Labs. Threats predictions (2015)"},{"key":"12_CR19","doi-asserted-by":"crossref","unstructured":"Li, L., Bartel, A., Bissyande, T., Klein, J., Le Traon, Y., Arzt, S., Rasthofer, S., Bodden, E., Octeau, D., McDaniel, P.: Iccta: detecting inter-component privacy leaks in android apps. In: Proceedings of the 37th ICSE, ICSE 2015. ACM (2015)","DOI":"10.1109\/ICSE.2015.48"},{"key":"12_CR20","doi-asserted-by":"crossref","unstructured":"Lindorfer, M., Neugschwandtner, M., Weichselbaum, L., Fratantonio, Y., van der Veen, V., Platzer, C.: Andrubis - 1,000,000 apps later: a view on current android malware behaviors. In: Proceedings of the 3rd International Workshop BADGERS (2014)","DOI":"10.1109\/BADGERS.2014.7"},{"key":"12_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1007\/978-3-319-08509-8_4","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"M Lindorfer","year":"2014","unstructured":"Lindorfer, M., Volanis, S., Sisto, A., Neugschwandtner, M., Athanasopoulos, E., Maggi, F., Platzer, C., Zanero, S., Ioannidis, S.: AndRadar: fast discovery of android applications in alternative markets. In: Dietrich, S. (ed.) DIMVA 2014. LNCS, vol. 8550, pp. 51\u201371. Springer, Heidelberg (2014)"},{"key":"12_CR22","doi-asserted-by":"crossref","unstructured":"Lovat, E., Oudinet, J., Pretschner, A.: On quantitative dynamic data flow tracking. In: Fourth ACM Conference CODASPY (2014)","DOI":"10.1145\/2557547.2557551"},{"key":"12_CR23","unstructured":"Maslennikov, D.: Zeus-in-the-mobile - facts and theories, October 2011. Blog"},{"key":"12_CR24","unstructured":"Niemietz, M., Schwenk, J.: Ui redressing attacks on android devices (2014). BlackHat Asia"},{"key":"12_CR25","unstructured":"Nigam, R.: A timeline of mobile botnets, April 2015"},{"key":"12_CR26","unstructured":"NViso. \n                      http:\/\/apkscan.nviso.be\/"},{"key":"12_CR27","unstructured":"Octeau, D., McDaniel, P., Jha, S., Bartel, A., Bodden, E., Klein, J., Le Traon, Y.: Effective inter-component communication mapping in android: an essential step towards holistic security analysis. In: Proceedings of the 22nd USENIX Security Symposium, USENIX, Washington, D.C. (2013)"},{"key":"12_CR28","unstructured":"Board of Governors of the Federal Reserve System. Consumers and mobile financial services 2014, March 2014"},{"key":"12_CR29","doi-asserted-by":"crossref","unstructured":"Petsas, T., Voyatzis, G., Athanasopoulos, E., Polychronakis, M., Ioannidis, S.: Rage against the virtual machine: hindering dynamic analysis of android malware. In: Proceedings of the Seventh European Workshop on System Security, EuroSec 2014, New York, NY, USA (2014)","DOI":"10.1145\/2592791.2592796"},{"key":"12_CR30","doi-asserted-by":"crossref","unstructured":"Rasthofer, S., Arzt, S., Huber, S., Kohlhagen, M., Pfretschner, B., Bodden, E., Richter, P.: Droidsearch: a tool for scaling android app triage to real-world app stores. In: Proceedings of the IEEE SAI 2015, July 2015","DOI":"10.1109\/SAI.2015.7237151"},{"key":"12_CR31","unstructured":"Rasthofer, S., Asrar, I., Huber, S., Bodden, E.: An investigation of the android\/badaccents malware which exploits a new android tapjacking attack. Technical report, TU Darmstadt, Fraunhofer SIT and McAfee Mobile Research, April 2015"},{"key":"12_CR32","doi-asserted-by":"crossref","unstructured":"Rastogi, V., Chen, Y., Jiang, X.: Droidchameleon: evaluating android anti-malware against transformation attacks. In: Proceedings of the 8th ACM SIGSAC ASIA CCS, ASIA CCS 2013, New York, NY, USA (2013)","DOI":"10.1145\/2484313.2484355"},{"key":"12_CR33","doi-asserted-by":"crossref","unstructured":"Rieck, K., Trinius, P., Willems, C., Holz, T.: Automatic analysis of malware behavior using machine learning. J. Comput. Secur. 19(4) (2011)","DOI":"10.3233\/JCS-2010-0410"},{"key":"12_CR34","doi-asserted-by":"crossref","unstructured":"Sasnauskas, R., Regehr, J.: Intent fuzzer: crafting intents of death. In: Proceedings of the 2014 Joint International Workshop on Dynamic Analysis (WODA) and Software and System Performance Testing, Debugging, and Analytics (PERTEA), WODA+PERTEA 2014. ACM, New York (2014)","DOI":"10.1145\/2632168.2632169"},{"key":"12_CR35","doi-asserted-by":"crossref","unstructured":"Spreitzenbarth, M., Freiling, F., Echtler, F., Schreck, T., Hoffmann, J.: Mobile-sandbox: having a deeper look into android applications. In: Proceedings of the 28th Annual ACM SAC, SAC 2013. ACM, New York (2013)","DOI":"10.1145\/2480362.2480701"},{"key":"12_CR36","unstructured":"statista, July 2014. \n                      http:\/\/www.statista.com\/statistics\/266210\/number-of-available-applications-in-the-google-play-store\/"},{"key":"12_CR37","unstructured":"Strazzere, T.: Android hacker protection level 0. Defcon 22"},{"key":"12_CR38","unstructured":"Symantec. Symantec report on the underground economy (2008)"},{"key":"12_CR39","unstructured":"Android Developer Team. Device administration. \n                      http:\/\/developer.android.com\/guide\/topics\/admin\/device-admin.html"},{"key":"12_CR40","unstructured":"Android Developer Team. Device policymanager. \n                      http:\/\/developer.android.com\/reference\/android\/app\/admin\/DevicePolicyManager.html"},{"key":"12_CR41","unstructured":"Android Developer Team. Intent. \n                      http:\/\/developer.android.com\/reference\/android\/content\/Intent.html"},{"key":"12_CR42","unstructured":"Tinaztepe, E., Kurt, D., G\u00fcle\u00e7, A.: Android obad. Technical report, COMODO, July 2013"},{"key":"12_CR43","doi-asserted-by":"crossref","unstructured":"Tripp, O., Guarnieri, S., Pistoia, M., Aravkin, A.: Aletheia: improving the usability of static security analysis. In: Proceedings of the 2014 ACM SIGSAC CCS, CCS 2014. ACM, New York (2014)","DOI":"10.1145\/2660267.2660339"},{"key":"12_CR44","doi-asserted-by":"crossref","unstructured":"Zeng, Y., Shin, K.G., Hu, X.: Design of sms commanded-and-controlled and p2p-structured mobile botnets. In: Proceedings of the Fifth ACM WISEC Conference, WISEC 2012. ACM, New York (2012)","DOI":"10.1145\/2185448.2185467"},{"key":"12_CR45","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Yang, M., Xu, B., Yang, Z., Gu, G., Ning, P., Wang, X.S., Zang, B.: Vetting undesirable behaviors in android apps with permission use analysis. In: Proceedings of the 2013 ACM SIGSAC CCS Conference, CCS 2013, pp. 611\u2013622. ACM, New York (2013)","DOI":"10.1145\/2508859.2516689"},{"key":"12_CR46","doi-asserted-by":"crossref","unstructured":"Zheng, M., Sun, M., Lui, J.C.S.: Droid analytics: a signature based analytic system to collect, extract, analyze and associate android malware. In: Proceedings of the 12th IEEE International TRUSTCOM Conference, TRUSTCOM 2013. IEEE Computer Society, Washington, DC (2013)","DOI":"10.1109\/TrustCom.2013.25"},{"key":"12_CR47","doi-asserted-by":"crossref","unstructured":"Zhou, Y., Jiang, X.: Dissecting android malware: characterization and evolution. In: Proceedings of the 2012 IEEE S&P, SP 2012. IEEE Computer Society, Washington, DC (2012)","DOI":"10.1109\/SP.2012.16"}],"container-title":["Lecture Notes in Computer Science","Information Security Theory and Practice"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-24018-3_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,22]],"date-time":"2019-08-22T07:04:48Z","timestamp":1566457488000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-24018-3_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319240176","9783319240183"],"references-count":47,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-24018-3_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"24 October 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}