{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T17:25:28Z","timestamp":1783099528961,"version":"3.54.6"},"reference-count":51,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,5]]},"DOI":"10.1109\/sp.2017.31","type":"proceedings-article","created":{"date-parts":[[2017,6,26]],"date-time":"2017-06-26T20:34:26Z","timestamp":1498509266000},"page":"121-136","source":"Crossref","is-referenced-by-count":210,"title":["Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security"],"prefix":"10.1109","author":[{"given":"Felix","family":"Fischer","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Konstantin","family":"Bottinger","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huang","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christian","family":"Stransky","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yasemin","family":"Acar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Backes","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sascha","family":"Fahl","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"DECKARD: Scalable and Accurate Tree-Based Detection of Code Clones","author":"jiang","year":"2007","journal-title":"Proceedings of the 29th International Conference on Software Engineering ser ICSE ‘07"},{"key":"ref38","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-37300-8_4","article-title":"Juxtapp: A Scalable System for Detecting Code Reuse Among Android Applications","author":"hanna","year":"2013","journal-title":"Proceedings of the 5th International Conference on Detection of Intrusions and Malware and Vulnerability Assessment Ser DIMVA '08"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1361684.1361686"},{"key":"ref32","article-title":"Statistical Learning and Kernel Methods","author":"sch\u00f6lkopf","year":"2000","journal-title":"Microsoft Research Tech Rep"},{"key":"ref31","year":"0","journal-title":"Android Developers"},{"key":"ref30","year":"0","journal-title":"SANS Institute"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1142\/S021800140900748X"},{"key":"ref36","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-40203-6_11","article-title":"AnDarwin: Scalable Detection of Semantically Similar Android Applications","author":"crussell","year":"2013","journal-title":"ESORICS 2013 18th European Symposium on Research in ComputerSecurity"},{"key":"ref35","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-33167-1_3","article-title":"Attack of the Clones: Detecting Cloned Applications on Android Markets","author":"crussell","year":"2012","journal-title":"The 17th European Symposium on Research in Computer Security-ESORICS 2012"},{"key":"ref34","year":"0","journal-title":"Google Inc"},{"key":"ref28","year":"0","journal-title":"Java Security and Related Topics"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-74619-5_11","article-title":"A New Class of Weak Keys for Blowfish","author":"kara","year":"2007","journal-title":"Fast Software Encryption"},{"key":"ref29","author":"giry","year":"0","journal-title":"Keylength"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"ref1","article-title":"Android Permissions Demystified","author":"porter felt","year":"2011","journal-title":"Proceedings of the 18th ACM Conference on Computerand Communication Security"},{"key":"ref20","article-title":"The Transport Layer Security (TLS) Protocol Version 1.3","author":"rescorla","year":"2016","journal-title":"Tech Rep"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46035-7_35"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5246"},{"key":"ref24","article-title":"On the Security of RC4 in TLS","author":"alfardan","year":"2013","journal-title":"Usenix Security"},{"key":"ref23","article-title":"Related-key Cryptanalysis of 3-WAY, Biham-DES, CAST, DES-X, NewDES, RC 2, and TEA","author":"kelsey","year":"1997","journal-title":"Proceedings of the First International Conference on Information and Communication Security ser ICICS ‘97"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-60865-6_39"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-69710-1_16"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2597008.2597155"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1449764.1449790"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568313"},{"key":"ref40","article-title":"A Tutorial on Principal Components Analysis","author":"smith","year":"2002","journal-title":"Cornell University Technical Report"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7525"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2898"},{"key":"ref14","article-title":"A Chosen Ciphertext Attack on RSA Optimal Asymmetric Encryption Padding (OAEP) As Standardized in PKCS V2.0","author":"manger","year":"2001","journal-title":"Proceedings of the 21st Annual InternationalCryptology Conference on Advances in Cryptology ser CRYPTO"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-131Ar1"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0055716"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516655"},{"key":"ref18","article-title":"To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections","author":"oltrogge","year":"2015","journal-title":"Proc 24th USENIX Security Symposium (SEC'15) USENIX Association"},{"key":"ref19","author":"turner","year":"2011","journal-title":"Prohibiting Secure Sockets Layer (SSL) Version 2 0"},{"key":"ref4","year":"0","journal-title":"Oracle"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516693"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.42"},{"key":"ref5","author":"zhitnitsky","year":"2015","journal-title":"Libraries on GitHub"},{"key":"ref8","year":"2014","journal-title":"Jasypt"},{"key":"ref7","author":"dey","year":"2008","journal-title":"Keyczar A Cryptographic Toolkit"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SocialCom.2013.35"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19210-9_2"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23328"},{"key":"ref45","article-title":"A Study of Android Application Security","author":"enck","year":"2011","journal-title":"Proceedings of the 20th USENIX Conference on Security"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985907"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"ref41","article-title":"Performance Measures For Information Extraction","author":"makhoul","year":"1999","journal-title":"Proceedings of DARPA Broadcast News Workshop"},{"key":"ref44","doi-asserted-by":"crossref","DOI":"10.1145\/1999995.2000018","article-title":"Analyzing Interapplication Communication in Android","author":"chin","year":"2011","journal-title":"Proceedings of the 9th International Conference on Mobile Systems Applications and Services"},{"key":"ref43","article-title":"TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones","author":"enck","year":"2010","journal-title":"Proc 9th U senix Symposium on Operating Systems Design and Implementation (OSDI'10)"}],"event":{"name":"2017 IEEE Symposium on Security and Privacy (SP)","location":"San Jose, CA, USA","start":{"date-parts":[[2017,5,22]]},"end":{"date-parts":[[2017,5,26]]}},"container-title":["2017 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7957740\/7958557\/07958574.pdf?arnumber=7958574","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,20]],"date-time":"2025-06-20T01:45:12Z","timestamp":1750383912000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7958574\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,5]]},"references-count":51,"URL":"https:\/\/doi.org\/10.1109\/sp.2017.31","relation":{},"subject":[],"published":{"date-parts":[[2017,5]]}}}