{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T03:54:15Z","timestamp":1760586855794},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2017,9,13]],"date-time":"2017-09-13T00:00:00Z","timestamp":1505260800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"name":"Deutsche Forschungsgemeinschaft (DE)","award":["AP 206\/4","AP 206\/6"],"award-info":[{"award-number":["AP 206\/4","AP 206\/6"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Autom Softw Eng"],"published-print":{"date-parts":[[2018,6]]},"DOI":"10.1007\/s10515-017-0228-z","type":"journal-article","created":{"date-parts":[[2017,9,13]],"date-time":"2017-09-13T15:57:42Z","timestamp":1505318262000},"page":"315-346","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Lifting inter-app data-flow analysis to large app sets"],"prefix":"10.1007","volume":"25","author":[{"given":"Florian","family":"Sattler","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexander","family":"von Rhein","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thorsten","family":"Berger","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Niklas Schalck","family":"Johansson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mikael Mark","family":"Hard\u00f8","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sven","family":"Apel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,9,13]]},"reference":[{"key":"228_CR1","doi-asserted-by":"crossref","unstructured":"Apel, S., von Rhein, A., Wendler, P., Gr\u00f6\u00dflinger, A., Beyer, D.: Strategies for product-line verification: case studies and experiments. In: Proceedings of ICSE, pp. 482\u2013491. IEEE (2013)","DOI":"10.1109\/ICSE.2013.6606594"},{"key":"228_CR2","unstructured":"Apple.: App Store Sales Top $10 Billion in 2013. http:\/\/www.apple.com\/pr\/library\/2014\/01\/07App-Store-Sales-Top-10-Billion-in-2013.html (2014)"},{"key":"228_CR3","doi-asserted-by":"crossref","unstructured":"Arzt, S., Rasthofer, S., Fritz, C., Bodden, E., Bartel, A., Klein, J., Le Traon, Y., Octeau, D., McDaniel. P.: FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. In: Proceedings of PLDI, pp. 259\u2013269. ACM (2014)","DOI":"10.1145\/2666356.2594299"},{"issue":"11","key":"228_CR4","doi-asserted-by":"crossref","first-page":"1520","DOI":"10.1016\/j.infsof.2014.05.005","volume":"56","author":"T Berger","year":"2014","unstructured":"Berger, T., Pfeiffer, R.-H., Tartler, R., Dienst, S., Czarnecki, K., Wasowski, A., She, S.: Variability mechanisms in software ecosystems. Inf. Softw. Technol. 56(11), 1520\u20131535 (2014)","journal-title":"Inf. Softw. Technol."},{"key":"228_CR5","unstructured":"Al Bidani, N., Vigant Raffay, A.: Systematic Literature Review of Mobile Inter-Application Security. Master\u2019s thesis, IT University of Copenhagen (2014)"},{"key":"228_CR6","doi-asserted-by":"crossref","unstructured":"Bodden, E., Tol\u00eado, T., Ribeiro, M., Brabrand, C., Borba, P., Mezini, M., SPLLIFT: Statically analyzing software product lines in minutes instead of years. In: Proceedings of PLDI, pp. 355\u2013364. ACM (2013)","DOI":"10.1145\/2491956.2491976"},{"key":"228_CR7","doi-asserted-by":"crossref","unstructured":"Burket, J., Flynn, L., Klieber, W., Lim, J., Shen, W., Snavely, W.: Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets. Technical Report CMU\/SEI-2015-TR-001, Software Engineering Institute (2015)","DOI":"10.21236\/ADA619331"},{"key":"228_CR8","doi-asserted-by":"crossref","unstructured":"Chin, E., Porter\u00a0Felt, A., Greenwood, K., Wagner, D.: Analyzing inter-application communication in android. In: Proceedings of MobiSys, pp. 239\u2013252. ACM (2011)","DOI":"10.1145\/1999995.2000018"},{"key":"228_CR9","doi-asserted-by":"crossref","unstructured":"Classen, A., Heymans, P., Schobbens, P.-Y., Legay, A., Raskin. J.-F.: Model checking lots of systems: efficient verification of temporal properties in software product lines. In: Proceedings of ICSE, pp. 335\u2013344. ACM (2010)","DOI":"10.1145\/1806799.1806850"},{"key":"228_CR10","doi-asserted-by":"crossref","unstructured":"Czarnecki, K., Antkiewicz, M.: Mapping features to models: a template approach based on superimposed variants. In: Proceedings of GPCE, pp. 422\u2013437. Springer (2005)","DOI":"10.1007\/11561347_28"},{"key":"228_CR11","doi-asserted-by":"crossref","unstructured":"Czarnecki, K., Pietroszek, K.: Verifying feature-based model templates against well-formedness OCL constraints. In: Proceedings of GPCE, pp. 211\u2013220. ACM (2006)","DOI":"10.1145\/1173706.1173738"},{"key":"228_CR12","unstructured":"Dienst, S., Berger, T.: Static Analysis of App Dependencies in Android Bytecode. Technical note. http:\/\/informatik.uni-leipzig.de\/~berger\/tr\/2012-dienst.pdf (2012)"},{"issue":"2","key":"228_CR13","doi-asserted-by":"crossref","first-page":"5:1","DOI":"10.1145\/2619091","volume":"32","author":"W Enck","year":"2014","unstructured":"Enck, W., Gilbert, P., Han, S., Tendulkar, V., Chun, B., Cox, L., Jung, J., McDaniel, P., Sheth, A.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM TOCS 32(2), 5:1\u20135:29 (2014)","journal-title":"ACM TOCS"},{"key":"228_CR14","unstructured":"Enck, W., Octeau, D., McDaniel, P., Chaudhuri. S.: A study of android application security. In: Proceedings of USENIX, pp. 21\u201321. USENIX Association (2011)"},{"issue":"4","key":"228_CR15","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1145\/54289.871709","volume":"22","author":"N Hardy","year":"1988","unstructured":"Hardy, N.: The confused deputy (or why capabilities might have been invented). ACM SIGOPS 22(4), 36\u201338 (1988)","journal-title":"ACM SIGOPS"},{"key":"228_CR16","doi-asserted-by":"crossref","unstructured":"K\u00e4stner, C., Giarrusso, P., Rendel, T., Erdweg, S., Ostermann, K., Berger, T.: Variability-aware parsing in the presence of lexical macros and conditional compilation. In: Proceeedings of OOPSLA, pp. 805\u2013824. ACM (2011)","DOI":"10.1145\/2048066.2048128"},{"key":"228_CR17","doi-asserted-by":"crossref","unstructured":"Klieber, W., Flynn, L., Bhosale, A., Jia, L., Bauer, L.: Android taint flow analysis for app sets. In: Proceedings of SOAP, pp. 1\u20136. ACM (2014)","DOI":"10.1145\/2614628.2614633"},{"key":"228_CR18","doi-asserted-by":"crossref","unstructured":"Li, L., Bartel, A., Bissyande, T., Klein, J., Le Traon, Y., Arzt, S., Rasthofer, S., Bodden, E., Octeau, D., McDaniel, P.: IccTA: detecting inter-component privacy leaks in android apps. In: Proceedings of ICSE, pp. 280\u2013292. IEEE (2015)","DOI":"10.1109\/ICSE.2015.48"},{"key":"228_CR19","doi-asserted-by":"crossref","unstructured":"Li, L., Bissyande, T., Papadakis, M., Rasthofer, S., Bartel, A., Octeau, D., Klein, J., Le Traon, Y.: Static analysis of android apps: a systematic literature review. Technical report, University of Luxembourg, Fraunhofer SIT\/TU Darmstadt, University of Wisconsin and Pennsylvania State University (2016)","DOI":"10.1016\/j.infsof.2017.04.001"},{"key":"228_CR20","doi-asserted-by":"crossref","unstructured":"Liebig, J., von Rhein, A., K\u00e4stner, C., Apel, S., \u00a0D\u00f6rre, J., Lengauer, C.: Scalable analysis of variable software. In: Proceedings of ESEC\/FSE, pp. 81\u201391. ACM (2013)","DOI":"10.1145\/2491411.2491437"},{"key":"228_CR21","doi-asserted-by":"crossref","unstructured":"Lu, L., Li, Z., Wu, Z., Lee, W., Jiang, G.: CHEX: statically vetting android apps for component hijacking vulnerabilities. In: Proceedings of CCS, pp. 229\u2013240. ACM (2012)","DOI":"10.1145\/2382196.2382223"},{"key":"228_CR22","doi-asserted-by":"crossref","unstructured":"Martin, W., Harman, M., Jia, Y., Sarro, F., Zhang, Y.: The app sampling problem for app store mining. In: Proceedings of MSR, pp. 123\u2013133. ACM (2015)","DOI":"10.1109\/MSR.2015.19"},{"issue":"2","key":"228_CR23","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1109\/MS.2013.142","volume":"31","author":"I Mojica","year":"2014","unstructured":"Mojica, I., Adams, B., Nagappan, M., Dienst, S., Berger, T., Hassan, A.: A large scale empirical study on software reuse in mobile apps. IEEE Softw. 31(2), 78\u201386 (2014)","journal-title":"IEEE Softw."},{"key":"228_CR24","doi-asserted-by":"crossref","unstructured":"Mojica, I.J., Nagappan, M., Adams, B., Berger, T., Dienst, S., Hassan, A.E.: On ad library updates in android apps. IEEE Softw. (2015). Online first","DOI":"10.1109\/MS.2014.81"},{"key":"228_CR25","doi-asserted-by":"crossref","unstructured":"Nadi, S., Berger, T., K\u00e4stner, C., Czarnecki, K.: Mining configuration constraints: static analyses and empirical results. In: Proceedings of ICSE, pp. 140\u2013151. ACM (2014)","DOI":"10.1145\/2568225.2568283"},{"key":"228_CR26","doi-asserted-by":"crossref","unstructured":"Nauman, M., Khan, S., Zhang, X.: Apex: extending android permission model and enforcement with user-defined runtime constraints. In: Proceedings of ASIACCS, pp. 328\u2013332. ACM (2010)","DOI":"10.1145\/1755688.1755732"},{"key":"228_CR27","doi-asserted-by":"crossref","unstructured":"Octeau, D., Jha, S., Dering, M., McDaniel, P., Bartel, A., Li, L., Klein, J., Le Traon, Y.: Combining static analysis with probabilistic models to enable market-scale android inter-component analysis. In: Proceedings of international symposium on principles of programming languages (POPL), pp. 469\u2013484. ACM (2016)","DOI":"10.1145\/2837614.2837661"},{"key":"228_CR28","doi-asserted-by":"crossref","unstructured":"Octeau, D., Luchaup, D., Dering, M., Jha, S., McDaniel, P.: Composite constant propagation: application to android inter-component communication analysis. In: Proceedings of ICSE, pp. 77\u201388. IEEE (2015)","DOI":"10.1109\/ICSE.2015.30"},{"key":"228_CR29","unstructured":"Octeau, D., McDaniel, P., Jha, S., Bartel, A., Bodden, E., Klein, J., Le\u00a0Traon, Y.: Effective inter-component communication mapping in android with epicc: an essential step towards holistic security analysis. In: Proceedings of USENIX, pp. 543\u2013558. USENIX Association (2013)"},{"issue":"6","key":"228_CR30","doi-asserted-by":"crossref","first-page":"658","DOI":"10.1002\/sec.360","volume":"5","author":"M Ongtang","year":"2012","unstructured":"Ongtang, M., McLaughlin, S., Enck, W., McDaniel, P.: Semantically rich application-centric security in android. Secur. Commun. Netw. 5(6), 658\u2013673 (2012)","journal-title":"Secur. Commun. Netw."},{"key":"228_CR31","unstructured":"Porter\u00a0Felt, A., Wang, H., Moshchuk, A., Hanna, S., Chin, E.: Permission re-delegation: attacks and defenses. In: Proceedings of USENIX, pp. 22. USENIX Association (2011)"},{"key":"228_CR32","doi-asserted-by":"crossref","unstructured":"Sadeghi, A. Bagheri, H., Malek, S.: Analysis of android inter-app security vulnerabilities using COVERT. In: Proceedings of ICSE, pp. 725\u2013728. IEEE (2015)","DOI":"10.1109\/ICSE.2015.233"},{"issue":"6","key":"228_CR33","doi-asserted-by":"crossref","first-page":"10:1","DOI":"10.1147\/JRD.2013.2284403","volume":"57","author":"D Sb\u00eerlea","year":"2013","unstructured":"Sb\u00eerlea, D., Burke, M.G., Guarnieri, S., Pistoia, M., Sarkar, V.: Automatic detection of inter-application permission leaks in android applications. IBM J. Res. Dev. 57(6), 10:1\u201310:12 (2013)","journal-title":"IBM J. Res. Dev."},{"issue":"1","key":"228_CR34","doi-asserted-by":"crossref","first-page":"6:1","DOI":"10.1145\/2580950","volume":"47","author":"T Th\u00fcm","year":"2014","unstructured":"Th\u00fcm, T., Apel, S., K\u00e4stner, C., Schaefer, I., Saake, G.: A classification and survey of analysis strategies for software product lines. ACM Comput. Surv. 47(1), 6:1\u20136:45 (2014)","journal-title":"ACM Comput. Surv."},{"key":"228_CR35","doi-asserted-by":"crossref","unstructured":"Viennot, N., Garcia, E., Nieh, J.: A measurement study of google play. In: Proceedings of SIGMETRICS, pp. 221\u2013233. ACM (2014)","DOI":"10.1145\/2591971.2592003"},{"key":"228_CR36","doi-asserted-by":"crossref","unstructured":"Walkingshaw, E., K\u00e4stner, C., Erwig, M., Apel, S., Bodden, E.: Variational data structures: exploring trade-offs in computing with variability. In Proceedings of onward!, pp. 213\u2013226. ACM (2014)","DOI":"10.1145\/2661136.2661143"},{"key":"228_CR37","doi-asserted-by":"crossref","unstructured":"Wei, F., Roy, S., Ou, X., Robby: Amandroid: a precise and general inter-component data flow analysis framework for security vetting of android apps. In: Proceedings of CCS, pp. 1329\u20131341. ACM (2014)","DOI":"10.1145\/2660267.2660357"},{"key":"228_CR38","doi-asserted-by":"crossref","unstructured":"Zhou, Y., Jiang, X.: Dissecting android malware: characterization and evolution. In: Proceedings of SSP, pp. 95\u2013109. IEEE (2012)","DOI":"10.1109\/SP.2012.16"}],"container-title":["Automated Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10515-017-0228-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10515-017-0228-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10515-017-0228-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,3]],"date-time":"2019-10-03T08:39:31Z","timestamp":1570091971000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10515-017-0228-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,9,13]]},"references-count":38,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2018,6]]}},"alternative-id":["228"],"URL":"https:\/\/doi.org\/10.1007\/s10515-017-0228-z","relation":{},"ISSN":["0928-8910","1573-7535"],"issn-type":[{"value":"0928-8910","type":"print"},{"value":"1573-7535","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,9,13]]}}}