{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T11:48:41Z","timestamp":1781005721735,"version":"3.54.1"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319788128","type":"print"},{"value":"9783319788135","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-78813-5_24","type":"book-chapter","created":{"date-parts":[[2018,4,10]],"date-time":"2018-04-10T06:03:21Z","timestamp":1523340201000},"page":"469-488","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Inferring Implicit Assumptions and\u00a0Correct Usage of Mobile Payment Protocols"],"prefix":"10.1007","author":[{"given":"Quanqi","family":"Ye","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guangdong","family":"Bai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Naipeng","family":"Dong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jin Song","family":"Dong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,4,11]]},"reference":[{"key":"24_CR1","unstructured":"Create and process orders (2016). https:\/\/developer.paypal.com\/webapps\/developer\/docs\/integration\/direct\/create-process-order\/ . Accessed Aug 2016"},{"key":"24_CR2","unstructured":"Future payments mobile integration (2016). https:\/\/github.com\/paypal\/PayPal-Android-SDK\/blob\/master\/docs\/future_payments_mobile.md . Accessed Aug 2016"},{"key":"24_CR3","unstructured":"Paypal sandbox testing guide (2016). https:\/\/developer.paypal.com\/docs\/classic\/lifecycle\/ug_sandbox\/ . Accessed Aug 2016"},{"key":"24_CR4","unstructured":"Authorization and Capture (2016). https:\/\/developer.paypal.com\/docs\/classic\/admin\/auth-capture\/ . Accessed Aug 2016"},{"key":"24_CR5","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/TSE.2017.2697848","volume":"PP","author":"G Bai","year":"2017","unstructured":"Bai, G., Ye, Q., Wu, Y., Merwe, H., Sun, J., Liu, Y., Dong, J.S., Visser, W.: Towards model checking android applications. IEEE Trans. Software Eng. PP, 1 (2017)","journal-title":"IEEE Trans. Software Eng."},{"key":"24_CR6","unstructured":"Bai, G., Lei, J., Meng, G., Venkatraman, S.S., Saxena, P., Sun, J., Liu, Y., Dong, J.S.: Authscan: automatic extraction of web authentication protocols from implementations. In: 20th Annual Network and Distributed System Security Symposium (NDSS) (2013)"},{"key":"24_CR7","doi-asserted-by":"crossref","unstructured":"Bai, G., Sun, J., Wu, J., Ye, Q., Li, L., Dong, J.S., Guo, S.: All your sessions are belong to us: investigating authenticator leakage through backup channels on android. In: 20th International Conference on Engineering of Complex Computer Systems (ICECCS), pp. 60\u201369. IEEE (2015)","DOI":"10.1109\/ICECCS.2015.17"},{"key":"24_CR8","unstructured":"ML Communication: Proxydroid (2017). https:\/\/play.google.com\/store\/apps\/details?id=org.proxydroid&hl=en . Accessed 7 Aug 2017"},{"key":"24_CR9","unstructured":"Denale, R.: U.S. census bureau news-quarterly retail e-commerce sales, 17 May 2016. https:\/\/www.census.gov\/retail\/mrts\/www\/data\/pdf\/ec_current.pdf . Accessed Aug 2016"},{"key":"24_CR10","doi-asserted-by":"crossref","unstructured":"Jones, M., Hardt, D.: The OAuth 2.0 authorization framework: Bearer token usage. Technical report (2012)","DOI":"10.17487\/rfc6750"},{"key":"24_CR11","doi-asserted-by":"crossref","unstructured":"Josefsson, S.: The base16, base32, and base64 data encodings (2006)","DOI":"10.17487\/rfc4648"},{"key":"24_CR12","unstructured":"Meola, A.: The rise of m-commerce: mobile shopping stats and trends, December 2016"},{"key":"24_CR13","doi-asserted-by":"crossref","unstructured":"Oberheide, J., Jahanian, F.: When mobile is harder than fixed (and vice versa): demystifying security challenges in mobile environments. In: Proceedings of the Eleventh Workshop on Mobile Computing Systems and Applications, pp. 43\u201348. ACM (2010)","DOI":"10.1145\/1734583.1734595"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"Pellegrino, G., Balzarotti, D.: Toward black-box detection of logic flaws in web applications. In: 21st Annual Network and Distributed System Security Symposium (NDSS) (2014)","DOI":"10.14722\/ndss.2014.23021"},{"key":"24_CR15","doi-asserted-by":"crossref","unstructured":"Sudhodanan, A., Armando, A., Carbone, R., Compagna, L.: Attack patterns for black-box security testing of multi-party web applications. In: 23rd Annual Network and Distributed System Security Symposium (NDSS) (2016)","DOI":"10.14722\/ndss.2016.23286"},{"key":"24_CR16","doi-asserted-by":"crossref","unstructured":"Sun, F., Xu, L., Su, Z.: Detecting logic vulnerabilities in e-commerce applications. In: 21st Annual Network and Distributed System Security Symposium (NDSS) (2014)","DOI":"10.14722\/ndss.2014.23351"},{"key":"24_CR17","doi-asserted-by":"crossref","unstructured":"Wang, R., Chen, S., Wang, X., Qadeer, S.: How to shop for free online-security analysis of cashier-as-a-service based web stores. In: IEEE Symposium on Security and Privacy, pp. 465\u2013480. IEEE (2011)","DOI":"10.1109\/SP.2011.26"},{"key":"24_CR18","unstructured":"Wang, R., Zhou, Y., Chen, S., Qadeer, S., Evans, D., Gurevich, Y.: Explicating SDKs: uncovering assumptions underlying secure authentication and authorization. In: Presented as Part of the 22nd USENIX Security Symposium (USENIX Security 13), pp. 399\u2013314 (2013)"},{"key":"24_CR19","doi-asserted-by":"crossref","unstructured":"Yang, W., Zhang, Y., Li, J., Liu, H., Wang, Q., Zhang, Y., Gu, D.: Show me the money! Finding flawed implementations of third-party in-app payment in android apps (2017)","DOI":"10.14722\/ndss.2017.23091"},{"key":"24_CR20","doi-asserted-by":"crossref","unstructured":"Ye, Q., Bai, G., Wang, K., Dong, J.S.: Formal analysis of a single sign-on protocol implementation for android. In: 20th International Conference on Engineering of Complex Computer Systems (ICECCS), pp. 90\u201399. IEEE (2015)","DOI":"10.1109\/ICECCS.2015.20"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-78813-5_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,14]],"date-time":"2019-10-14T17:54:56Z","timestamp":1571075696000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-78813-5_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319788128","9783319788135"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-78813-5_24","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]}}}