{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,30]],"date-time":"2026-10-30T21:16:48Z","timestamp":1793395008775,"version":"4.5.0"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2018YFB2100300"],"award-info":[{"award-number":["2018YFB2100300"]}]},{"name":"National Key Research and Development Program of China","award":["2018YFB0803400"],"award-info":[{"award-number":["2018YFB0803400"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972369"],"award-info":[{"award-number":["61972369"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572453"],"award-info":[{"award-number":["61572453"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61520106007"],"award-info":[{"award-number":["61520106007"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572454"],"award-info":[{"award-number":["61572454"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["WK2150110009"],"award-info":[{"award-number":["WK2150110009"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tifs.2020.3044867","type":"journal-article","created":{"date-parts":[[2020,12,14]],"date-time":"2020-12-14T20:53:09Z","timestamp":1607979189000},"page":"1912-1927","source":"Crossref","is-referenced-by-count":9,"title":["AppAngio: Revealing Contextual Information of Android App Behaviors by API-Level Audit Logs"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3788-9643","authenticated-orcid":false,"given":"Zhaoyi","family":"Meng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6347-8747","authenticated-orcid":false,"given":"Yan","family":"Xiong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2043-2439","authenticated-orcid":false,"given":"Wenchao","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8682-6003","authenticated-orcid":false,"given":"Fuyou","family":"Miao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0646-846X","authenticated-orcid":false,"given":"Jianmeng","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2019","journal-title":"Monkey"},{"key":"ref38","article-title":"Static data flow analysis for Android applications","author":"arzt","year":"2017"},{"key":"ref33","first-page":"35","article-title":"The soot framework for Java program analysis: A retrospective","author":"lam","year":"2011","journal-title":"Proc CETUS"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484355"},{"key":"ref31","first-page":"280","article-title":"IccTA: detecting inter-component privacy leaks in Android apps","author":"li","year":"2015","journal-title":"Proceedings of the International Conference on Software Engineering ICSE'94"},{"key":"ref30","year":"2019","journal-title":"VirusShare"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516676"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23089"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660357"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"key":"ref40","year":"2020","journal-title":"VirusTotal"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052984"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516689"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.30"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.50"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23066"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2656460"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion.2019.00089"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"ref28","first-page":"468","article-title":"AndroZoo: Collecting Millions of Android Apps for the Research Community","author":"allix","year":"2016","journal-title":"2016 IEEE\/ACM 13th Conference on Mining Software Repositories (MSR)"},{"key":"ref4","year":"2020","journal-title":"Report Claims Xiaomi Phones Log Majority of Web and Phone Activity"},{"key":"ref27","year":"2019","journal-title":"ICC-Bench"},{"key":"ref3","first-page":"351","article-title":"EaseAndroid: Automatic policy analysis and refinement for security enhanced Android via large-scale semi-supervised learning","author":"wang","year":"2015","journal-title":"Proc Usenix Secur Symp"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.60"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref5","year":"2020","journal-title":"Google Collects a Frightening Amount of Data About You You can Find and Delete it Now"},{"key":"ref8","first-page":"50","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets","volume":"25","author":"zhou","year":"2012","journal-title":"Proc NDSS"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2011.226"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813714"},{"key":"ref9","first-page":"569","article-title":"Droidscope: Seamlessly reconstructing the OS and dalvik semantic views for dynamic Android malware analysis","author":"yan","year":"2012","journal-title":"Proc Usenix Secur Symp"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23265"},{"key":"ref46","first-page":"3","article-title":"Quire: Lightweight provenance for smart phone operating systems","volume":"31","author":"dietz","year":"2011","journal-title":"Proc Usenix Secur Symp"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931044"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635869"},{"key":"ref48","first-page":"426","article-title":"Mining apps for abnormal usage of sensitive data","author":"avdiienko","year":"2015","journal-title":"Proceedings of the International Conference on Software Engineering ICSE'94"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.30"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557560"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837661"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243835"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1735970.1736038"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2017.8115639"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435379"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref26","year":"2019","journal-title":"Droidbenchbenchmarks"},{"key":"ref43","first-page":"487","article-title":"Sleuth: Real-time attack scenario reconstruction from cots audit data","author":"hossain","year":"2017","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref25","first-page":"629","article-title":"Lprof: A non-intrusive request flow profiler for distributed systems","author":"zhao","year":"2014","journal-title":"Proc of USENIX Symp on Operating Systems Design and Implementation (OSDI)"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9151439\/09293262.pdf?arnumber=9293262","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:52:34Z","timestamp":1652194354000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9293262\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/tifs.2020.3044867","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}