{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T21:02:36Z","timestamp":1776718956223,"version":"3.51.2"},"reference-count":57,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Hong Kong Research Grants Council","award":["21219223"],"award-info":[{"award-number":["21219223"]}]},{"name":"Hong Kong Research Grants Council","award":["C1029-22G"],"award-info":[{"award-number":["C1029-22G"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3683285","type":"journal-article","created":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T19:35:39Z","timestamp":1776108939000},"page":"3856-3871","source":"Crossref","is-referenced-by-count":0,"title":["PriLabel: Toward Comprehensively Uncovering Omitted Disclosures in Privacy Labels of Android Apps on a Large Scale"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5815-4633","authenticated-orcid":false,"given":"Jinghang","family":"Wen","sequence":"first","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2483-8890","authenticated-orcid":false,"given":"Yongliang","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2692-8627","authenticated-orcid":false,"given":"Ruoqin","family":"Tang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xichen","family":"Yu","sequence":"additional","affiliation":[{"name":"Shandong University, Jinan, Shandong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China, Chengdu, Sichuan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-1952-885X","authenticated-orcid":false,"given":"Lei","family":"Xue","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-2846","authenticated-orcid":false,"given":"Qingchuan","family":"Zhao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4067-8230","authenticated-orcid":false,"given":"Jian","family":"Weng","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"4 Out of 5 People Don\u2019t Want Their Personal Data Collected or Shared Without Consent","year":"2021"},{"key":"ref2","first-page":"3667","article-title":"Share first, ask later (or never?) Studying violations of GDPR\u2019s explicit consent in Android apps","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Nguyen"},{"key":"ref3","volume-title":"Data Collection and Sharing Without Consent; A Summary of Recent Lawsuits, Fines and Cases","year":"2023"},{"key":"ref4","volume-title":"General Data Protection Regulation","year":"2016"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180196"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00050"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450048"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2018.1486870"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3517688"},{"key":"ref10","volume-title":"Mozilla Study: Data Privacy Labels for Most Top Apps in Google Play Store Are False or Misleading","year":"2023"},{"key":"ref11","volume-title":"See No Evil: Loopholes in Google\u2019s Data Safety Labels Keep Companies in the Clear and Consumers in the Dark","year":"2023"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3603216.3624967"},{"key":"ref13","first-page":"1091","article-title":"Lalaine: Measuring and characterizing non-compliance of apple privacy labels","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Xiao"},{"key":"ref14","first-page":"5645","article-title":"Abandon all hope ye who enter here: A dynamic, longitudinal investigation of Android\u2019s data safety section","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Secur.)","author":"Arkalakis"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884855"},{"key":"ref16","first-page":"993","article-title":"UIPicker: User-input privacy identification in mobile applications","volume-title":"Proc. 24th USENIX Secur. Symp. (USENIX Secur.)","author":"Nan"},{"key":"ref17","first-page":"977","article-title":"SUPOR: Precise and scalable sensitive user input detection for Android apps","volume-title":"Proc. 24th USENIX Secur. Symp. (USENIX Secur.)","author":"Huang"},{"key":"ref18","volume-title":"Banglalink Super FNF Call Rate 2025 | Add, Delete, Change, Check","author":"Uddin","year":"2025"},{"key":"ref19","first-page":"3789","article-title":"OVRseen: Auditing network traffic and privacy policies in oculus VR","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur.)","author":"Trimananda"},{"key":"ref20","volume-title":"Provide Information for Google Play\u2019s Data Safety Section","year":"2025"},{"key":"ref21","volume-title":"Understand App Privacy & Security Practices With Google Play\u2019s Data Safety Section","year":"2025"},{"key":"ref22","first-page":"6665","article-title":"Are you spying on me? Large-scale analysis on IoT data exposure through companion apps","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Nan"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00077"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23092"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680333"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3109563"},{"key":"ref27","first-page":"985","article-title":"Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with POLICHECK","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Secur.)","author":"Andow"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484536"},{"key":"ref29","first-page":"829","article-title":"Large language models for code analysis: Do LLMs really do their job?","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Secur.)","author":"Fang"},{"key":"ref30","first-page":"131545","article-title":"LLMDFA: Analyzing dataflow in code with large language models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wang"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00130"},{"key":"ref32","article-title":"CodeHalu: Code hallucinations in LLMs driven by execution-based verification","author":"Tian","year":"2024","journal-title":"arXiv:2405.00253"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.ijcnlp-main.45"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3571730"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1800"},{"key":"ref36","volume-title":"Signal","year":"2025"},{"key":"ref37","volume-title":"Identifying Users","year":"2025"},{"key":"ref38","volume-title":"Data Collected and Shared Automatically","year":"2025"},{"key":"ref39","volume-title":"Disable Advertising ID Collection","year":"2025"},{"key":"ref40","volume-title":"Best Practices for Unique Identifiers","year":"2025"},{"key":"ref41","volume-title":"JADX: Dex to Java Decompiler","year":"2025"},{"key":"ref42","first-page":"1","article-title":"Can large language models understand intermediate representations in compilers?","volume-title":"Proc. 42nd Int. Conf. Mach. Learn.","author":"Jiang"},{"key":"ref43","volume-title":"Introducing ChatGPT","year":"2025"},{"key":"ref44","first-page":"468","article-title":"AndroZoo: Collecting millions of Android apps for the research community","volume-title":"Proc. 13th Int. Conf. Mining Softw. Repositories","author":"Allix"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"ref47","volume-title":"Does Proguard Encrypt Strings Constants?","author":"Lafortune","year":"2025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.004"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3502012"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0106"},{"key":"ref51","first-page":"2831","article-title":"Unpacking privacy labels: A measurement and developer perspective on Google\u2019s data safety section","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Secur.)","author":"Khandelwal"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW59978.2023.00016"},{"key":"ref53","first-page":"847","article-title":"PentestGPT: Evaluating and harnessing large language models for automated penetration testing","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Secur.)","author":"Deng"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639117"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00125"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680323"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670340"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11480172.pdf?arnumber=11480172","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T20:03:15Z","timestamp":1776715395000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11480172\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3683285","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}