{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,2]],"date-time":"2025-06-02T00:40:07Z","timestamp":1748824807412,"version":"3.41.0"},"publisher-location":"Cham","reference-count":49,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319308050"},{"type":"electronic","value":"9783319308067"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-30806-7_14","type":"book-chapter","created":{"date-parts":[[2016,3,28]],"date-time":"2016-03-28T11:24:01Z","timestamp":1459164241000},"page":"216-232","source":"Crossref","is-referenced-by-count":1,"title":["AppPAL for Android"],"prefix":"10.1007","author":[{"given":"Joseph","family":"Hallett","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Aspinall","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"6","key":"14_CR1","first-page":"259","volume":"49","author":"S Arzt","year":"2014","unstructured":"Arzt, S., et al.: FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. Program. Lang. Des. Implementation 49(6), 259\u2013269 (2014)","journal-title":"Program. Lang. Des. Implementation"},{"key":"14_CR2","unstructured":"Aziz, B., Arenas, A., Wilson, M.: SecPAL4DSA. In: Cloud Computing and Intelligence Systems (2011)"},{"key":"14_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"543","DOI":"10.1007\/978-3-642-36742-7_39","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"M Backes","year":"2013","unstructured":"Backes, M., Gerling, S., Hammer, C., Maffei, M., von Styp-Rekowsky, P.: AppGuard \u2013 enforcing user requirements on android apps. In: Piterman, N., Smolka, S.A. (eds.) TACAS 2013 (ETAPS 2013). LNCS, vol. 7795, pp. 543\u2013548. Springer, Heidelberg (2013)"},{"key":"14_CR4","doi-asserted-by":"crossref","unstructured":"Barrera, D., Clark, J., McCarney, D., van Oorschot, P.C.: Understanding and improving app installation security mechanisms through empirical analysis of android. In: Security and Privacy in Smartphones and Mobile Devices, pp. 81\u201392, October 2012","DOI":"10.1145\/2381934.2381949"},{"key":"14_CR5","unstructured":"Becker, M.Y.: Secpal formalization and extensions. Technical report, Microsoft Research (2009)"},{"key":"14_CR6","doi-asserted-by":"crossref","unstructured":"Becker, M.Y., Fournet, C., Gordon, A.D.: SecPAL: design and semantics of a decentralized authorization language. Comput. Secur. Found. (2006)","DOI":"10.1109\/CSF.2007.18"},{"key":"14_CR7","unstructured":"Becker, M.Y., Malkis, A., Bussard, L.: A framework for privacy preferences and data-handling policies. Technical report, Microsoft Research (2009)"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"Becker, M.Y., Sewell, P.: Cassandra: flexible trust management, applied to electronic health records. In: Computer Security Foundations, pp. 139\u2013154 (2004)","DOI":"10.1109\/CSFW.2004.1310738"},{"key":"14_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1007\/3-540-49135-X_9","volume-title":"Security Protocols","author":"M Blaze","year":"1999","unstructured":"Blaze, M., Feigenbaum, J., Keromytis, A.D.: KeyNote: trust management for public-key infrastructures. In: Christianson, B., Crispo, B., Harbison, W.S., Roe, M. (eds.) Security Protocols 1998. LNCS, vol. 1550, pp. 59\u201363. Springer, Heidelberg (1999)"},{"key":"14_CR10","unstructured":"Blaze, M., Feigenbaum, J., Lacy, J.: Decentralized trust management. In: Security and Privacy, pp. 164\u2013173 (1996)"},{"key":"14_CR11","unstructured":"Bugiel, S., Davi, L., Dmitrienko, A.: Towards taming privilege-escalation attacks on Android. In: Network and Distributed System Security Symposium (2012)"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"Chia, P.H., Yamamoto, Y., Asokan, N.: Is this App Safe? World Wide Web, April 2012","DOI":"10.1145\/2187836.2187879"},{"key":"14_CR13","unstructured":"Desnos, A.: Androguard. https:\/\/github.com\/androguard\/androguard"},{"key":"14_CR14","doi-asserted-by":"crossref","unstructured":"Ellison, C., Frantz, B., Lainpson, B., Rivest, R., Thomas, B.: RFC 2693: SPKI certificate theory. In: The Internet Society (1999)","DOI":"10.17487\/rfc2693"},{"key":"14_CR15","unstructured":"Enck, W., Gilbert, P., Chun, B.G., Cox, L.P., Jung, J.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In: Operating Systems Design and Implementation (2010)"},{"key":"14_CR16","doi-asserted-by":"crossref","unstructured":"Enck, W., Ongtang, M., McDaniel, P.: On lightweight mobile phone application certification. In: Computer and Communications Security, pp. 235\u2013245, November 2009","DOI":"10.1145\/1653662.1653691"},{"key":"14_CR17","doi-asserted-by":"crossref","unstructured":"Fahl, S., Harbach, M., Muders, T., Baumg\u00e4rtner, L., Freisleben, B., Smith, M.: Why eve and mallory love Android. In: ASIA Computer and Communications Security, pp. 50\u201361, October 2012","DOI":"10.1145\/2382196.2382205"},{"key":"14_CR18","doi-asserted-by":"crossref","unstructured":"Felt, A.P., Chin, E., Hanna, S., Song, D., Wagner, D.: Android permissions demystified. In: Computer and Communications Security, pp. 627\u2013638, October 2011","DOI":"10.1145\/2046707.2046779"},{"key":"14_CR19","doi-asserted-by":"crossref","unstructured":"Felt, A.P., Ha, E., Egelman, S., Haney, A., Chin, E., Wagner, D.: Android permissions: user attention, comprehension, and behavior. In: Symposium On Usable Privacy and Security, p. 3, July 2012","DOI":"10.1145\/2335356.2335360"},{"key":"14_CR20","doi-asserted-by":"crossref","unstructured":"Feng, Y., Anand, S., Dillig, I., Aiken, A.: Apposcopy: semantics-based detection of Android malware through static analysis. In: Foundations of Software Engineering, pp. 576\u2013587. ACM Request Permissions, New York, New York, USA, November 2014","DOI":"10.1145\/2635868.2635869"},{"key":"14_CR21","unstructured":"Fuchs, A.P., Chaudhuri, A., Foster, J.S.: SCanDroid: automated security certification of Android applications. In: USENIX Security Symposium (2009)"},{"key":"14_CR22","unstructured":"Google: Android Auto. com.google.android.projection.gearhead"},{"key":"14_CR23","unstructured":"Google: Google Apps Device Policy. com.google.android.apps.enterprise.dmagent"},{"key":"14_CR24","doi-asserted-by":"crossref","unstructured":"Gurevich, Y., Neeman, I.: DKAL: distributed-knowledge authorization language. In: Computer Security Foundations, pp. 149\u2013162 (2008)","DOI":"10.1109\/CSF.2008.8"},{"key":"14_CR25","unstructured":"Gurevich, Y., Neeman, I.: DKAL 2. Technical report, MSR-TR-2009-11, Microsoft Research, February 2009"},{"key":"14_CR26","unstructured":"Hallett, J., Aspinall, D.: Towards an authorization framework for app security checking. In: ESSoS Doctoral Symposium. University of Edinburgh, February 2014"},{"key":"14_CR27","doi-asserted-by":"crossref","unstructured":"Hornyack, P., Han, S., Jung, J., Schechter, S.: These aren\u2019t the droids you\u2019re looking for: retrofitting android to protect data from imperious applications. In: Computer and Communications Security (2011)","DOI":"10.1145\/2046707.2046780"},{"key":"14_CR28","doi-asserted-by":"crossref","unstructured":"Humphrey, M., Park, S.M., Feng, J., Beekwilder, N., Wasson, G., Hogg, J., LaMacchia, B., Dillaway, B.: Fine-grained access control for GridFTP using SecPAL. In: Grid Computing (2007)","DOI":"10.1109\/GRID.2007.4354136"},{"key":"14_CR29","doi-asserted-by":"crossref","unstructured":"Jeon, J., Micinski, K.K., Vaughan, J.A., Fogel, A., Reddy, N., Foster, J.S., Millstein, T.: Dr. Android and Mr. Hide: fine-grained permissions in android applications. In: Security and Privacy in Smartphones and Mobile Devices, pp. 3\u201314, October 2012","DOI":"10.1145\/2381934.2381938"},{"key":"14_CR30","unstructured":"Kelley, P.G., Consolvo, S., Cranor, L.F., Jung, J., Sadeh, N., Wetherall, D.: A conundrum of permissions. In: Useable Security, February 2012"},{"key":"14_CR31","unstructured":"Kim, J., Yoon, Y., Yi, K., Shin, J., Center, S.: ScanDal: static analyzer for detecting privacy leaks in android applications. In: Mobile Security Technologies (2012)"},{"issue":"5","key":"14_CR32","first-page":"345","volume":"18","author":"D Krane","year":"2002","unstructured":"Krane, D., Light, L., Gravitch, D.: Privacy on and off the internet. Harris Interact. 18(5), 345\u2013359 (2002)","journal-title":"Harris Interact."},{"key":"14_CR33","doi-asserted-by":"crossref","unstructured":"Li, L., et al.: IccTA: detecting inter-component privacy leaks in Android apps. In: IEEE\/ACM 37th IEEE International Conference on Software Engineering (2015)","DOI":"10.1109\/ICSE.2015.48"},{"key":"14_CR34","unstructured":"Li, N., Mitchell, J.C.: Design of a role-based trust-management framework. In: Security and Privacy, pp. 114\u2013130 (2002)"},{"key":"14_CR35","unstructured":"Lin, J., Liu, B., Sadeh, N., Hong, J.I.: Modeling users\u2019 mobile app privacy preferences. In: Symposium On Usable Privacy and Security (2014)"},{"key":"14_CR36","unstructured":"Necula, G.C., Lee, P.: Proof-carrying Code. Technical report, CMU-CS-96-165, Carniegie Mellon University (1996)"},{"key":"14_CR37","unstructured":"Oasis: eXtensible Access Control Markup Language (XACML) Version 3.0, January 2013"},{"key":"14_CR38","doi-asserted-by":"crossref","unstructured":"Oliner, A.J., Iyer, A.P., Stoica, I., Lagerspetz, E.: Carat: collaborative energy diagnosis for mobile devices. In: Embedded Network Sensor Systems (2013)","DOI":"10.1145\/2517351.2517354"},{"key":"14_CR39","unstructured":"Petnel, R.: The Official EasyList Website. https:\/\/easylist.adblockplus.org\/en\/ (2016)"},{"key":"14_CR40","unstructured":"Poiesz, B.: Android M permissions. In: Google I\/O (2015)"},{"key":"14_CR41","doi-asserted-by":"crossref","unstructured":"Scarfone, K., Hoffman, P., Souppaya, M.: NIST Special Publication 800\u201346: Guide to Enterprise Telework and Remote Access Security, June 2009","DOI":"10.6028\/NIST.SP.800-46r1"},{"key":"14_CR42","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1007\/978-3-319-24953-7_17","volume-title":"Automated Technology for Verification and Analysis","author":"MN Seghir","year":"2015","unstructured":"Seghir, M.N., Aspinall, D.: EviCheck: digital evidence for android. In: Finkbeiner, B., et al. (eds.) ATVA 2015. LNCS, vol. 9364, pp. 221\u2013227. Springer, Heidelberg (2015). doi: 10.1007\/978-3-319-24953-7_17"},{"key":"14_CR43","unstructured":"Smalley, S., Craig, R.: Security enhanced (SE) android: bringing flexible MAC to Android. In: Network and Distributed System Security (2013)"},{"key":"14_CR44","doi-asserted-by":"crossref","unstructured":"Souppaya, M., Scarfone, K.: NIST Special Publication 800\u2013124: Guidelines for Managing the Security of Mobile Devices in the Enterprise, June 2013","DOI":"10.6028\/NIST.SP.800-124r1"},{"key":"14_CR45","unstructured":"Svajcer, V., McDonald, S.: Classifying PUAs in the Mobile Environment, October 2013. sophos.com"},{"key":"14_CR46","doi-asserted-by":"crossref","unstructured":"Thompson, C., Johnson, M., Egelman, S., Wagner, D., King, J.: When it\u2019s better to ask forgiveness than get permission. In: The Ninth Symposium, p. 1, New York, USA. ACM, New York (2013)","DOI":"10.1145\/2501604.2501605"},{"key":"14_CR47","doi-asserted-by":"crossref","unstructured":"Truong, H.T.T., Lagerspetz, E., Nurmi, P., Oliner, A.J., Tarkoma, S., Asokan, N., Bhattacharya, S.: The Company You Keep. In: World Wide Web, pp. 39\u201350, April 2014","DOI":"10.1145\/2566486.2568046"},{"key":"14_CR48","doi-asserted-by":"crossref","unstructured":"Wei, X., Gomez, L., Neamtiu, I., Faloutsos, M.: Permission evolution in the Android ecosystem. In: Anual Computer Security Applications Conference, pp. 31\u201340. ACM Request Permissions, New York, New York, USA, December 2012","DOI":"10.1145\/2420950.2420956"},{"key":"14_CR49","unstructured":"Zhou, Y., Wang, Z., Zhou, W., Jiang, X.: Hey, you, get off of my market: detecting malicious apps in official and alternative android markets. In: Network and Distributed System Security (2012)"}],"container-title":["Lecture Notes in Computer Science","Engineering Secure Software and Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-30806-7_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,2]],"date-time":"2025-06-02T00:20:37Z","timestamp":1748823637000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-30806-7_14"}},"subtitle":["Capturing and Checking Mobile App Policies"],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319308050","9783319308067"],"references-count":49,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-30806-7_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2016]]}}}