{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,12]],"date-time":"2025-06-12T16:46:42Z","timestamp":1749746802837,"version":"3.37.3"},"reference-count":40,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2015,9,1]],"date-time":"2015-09-01T00:00:00Z","timestamp":1441065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-0916688"],"award-info":[{"award-number":["CNS-0916688"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001321","name":"National Science Foundation","doi-asserted-by":"publisher","award":["NRF-2014K1A1A2043029"],"award-info":[{"award-number":["NRF-2014K1A1A2043029"]}],"id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2015,9,1]]},"DOI":"10.1109\/tdsc.2014.2366457","type":"journal-article","created":{"date-parts":[[2014,10,31]],"date-time":"2014-10-31T18:49:32Z","timestamp":1414781372000},"page":"571-584","source":"Crossref","is-referenced-by-count":25,"title":["Towards Automated Risk Assessment and Mitigation of Mobile Applications"],"prefix":"10.1109","volume":"12","author":[{"given":"Yiming","family":"Jing","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"0","key":"ref39"},{"year":"0","key":"ref38"},{"key":"ref33","article-title":"Flexible and fine-grained mandatory access control on android for diverse security and privacy policies","author":"bugiel","year":"0","journal-title":"Proc 22nd USENIX Secur Symp"},{"key":"ref32","article-title":"Security enhanced (se) android: Bringing flexible mac to android","author":"smalley","year":"0","journal-title":"Proc 20th Netw Distrib Syst Secur Symp"},{"key":"ref31","article-title":"Towards taming privilege-escalation attacks on android","author":"bugiel","year":"0","journal-title":"Proc 19th Netw Distrib Syst Secur Symp"},{"key":"ref30","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1007\/978-3-642-21599-5_7","article-title":"Taming information-stealing smartphone applications (on android)","author":"zhou","year":"2011","journal-title":"Trust and Trustworthy Computing"},{"year":"0","key":"ref37"},{"year":"0","key":"ref36"},{"key":"ref35","article-title":"How to ask for permission","author":"felt","year":"0","journal-title":"Proc Usenix Workshop Hot Topics in Security"},{"key":"ref34","first-page":"21","article-title":"A study of android application security","author":"enck","year":"0","journal-title":"Proc 20th USENIX Conf Secur"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382224"},{"year":"0","key":"ref40"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39256-6_15"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2187836.2187879"},{"key":"ref13","first-page":"201","article-title":"Is this app safe for children?: A comparison study of maturity ratings on android and IOS applications","author":"chen","year":"0","journal-title":"Proc Int World Wide Web Conf"},{"key":"ref14","first-page":"527","article-title":"Whyper: Towards automating risk assessment of mobile applications","author":"pandita","year":"0","journal-title":"Proc 22nd USENIX Security Symp"},{"key":"ref15","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets","author":"zhou","year":"0","journal-title":"Proc 19th Annu Netw Distrib Syst Security Symp"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref17","first-page":"800","article-title":"Risk management guide for information technology systems","volume":"800","author":"stoneburner","year":"2002","journal-title":"NIST Special Publication"},{"key":"ref18","doi-asserted-by":"crossref","DOI":"10.21236\/ADA634134","article-title":"Introduction to the octave approach","author":"alberts","year":"2003"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"article-title":"Google removes vital privacy feature from android, claiming its release was accidental","year":"0","author":"eckersley","key":"ref28"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/775047.775067"},{"article-title":"Apple passes 50 billion app store downloads","year":"0","author":"robertson","key":"ref3"},{"key":"ref6","article-title":"Droidscope: Seamlessly reconstructing the os and dalvik semantic views for dynamic android malware analysis","author":"yan","year":"0","journal-title":"Proc 21st USENIX Security Symp"},{"key":"ref29","first-page":"328","article-title":"Apex: Extending android permission model and enforcement with user-defined runtime constraints","author":"nauman","year":"0","journal-title":"Proc of the 5th ACM Symp on Info Comput and Comm Sec"},{"key":"ref5","first-page":"639","article-title":"These aren’t the droids you’re looking for: Retrofitting android to protect data from imperious applications","author":"hornyack","year":"0","journal-title":"Proc 18th ACM Conf Comput Commun Secur"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653691"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435379"},{"article-title":"Google announces 900 million android activations, 48 billion apps downloaded","year":"0","author":"panzarino","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295141"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557549"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866317"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1386790.1386837"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1111\/1468-0262.00158"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1086\/269029"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335358"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/7240136\/06942253.pdf?arnumber=6942253","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T15:59:53Z","timestamp":1642003193000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6942253\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,9,1]]},"references-count":40,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2014.2366457","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2015,9,1]]}}}