{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T11:36:59Z","timestamp":1778413019296,"version":"3.51.4"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61502333"],"award-info":[{"award-number":["61502333"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572350"],"award-info":[{"award-number":["61572350"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61373035"],"award-info":[{"award-number":["61373035"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"MIT Interdisciplinary Consortium for Improving Critical Infrastructure Cybersecurity"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Serv. Comput."],"published-print":{"date-parts":[[2020,1,1]]},"DOI":"10.1109\/tsc.2016.2646687","type":"journal-article","created":{"date-parts":[[2016,12,30]],"date-time":"2016-12-30T19:18:07Z","timestamp":1483125487000},"page":"144-157","source":"Crossref","is-referenced-by-count":10,"title":["Shifting to Mobile: Network-Based Empirical Study of Mobile Vulnerability Market"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2549-7597","authenticated-orcid":false,"given":"Keman","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2148-0923","authenticated-orcid":false,"given":"Jia","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2617-7598","authenticated-orcid":false,"given":"Wei","family":"Tan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8158-7453","authenticated-orcid":false,"given":"Zhiyong","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1","article-title":"Bootstrapping the adoption of internet security protocols","author":"ozment","year":"2006","journal-title":"Proc 5th Workshop Econ Inf Secur"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39498-0_4"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2011.184"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.1040.0357"},{"key":"ref31","article-title":"Internet society global internet report 2015: Mobile evolution and development of the internet","year":"2015"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MobServ.2015.34"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2013.142"},{"key":"ref36","first-page":"1","article-title":"Given enough eyeballs, all bugs are shallow? Revisiting eric Raymond with bug bounty programs","author":"maillart","year":"2016","journal-title":"Proc Workshop Econ Inform Secur"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884828"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931044"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46295-0_16"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.04.012"},{"key":"ref29","first-page":"1","article-title":"Diversity or concentration? Hackers’ strategy for working across multiple bug bounty programs","author":"huang","year":"2016","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.33"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-6967-5_6"},{"key":"ref21","first-page":"273","article-title":"An empirical study of vulnerability rewards programs","author":"finifter","year":"2013","journal-title":"Proc 22nd USENIX Secur Symp"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.2014.1945"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.tics.2014.10.004"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2010.51"},{"key":"ref50","first-page":"79","article-title":"On the feasibility of large-scale infections of iOS devices","author":"wang","year":"2014","journal-title":"Proc 23rd USENIX Secur Symp"},{"key":"ref51","first-page":"499","article-title":"Android permissions remystified: A field study on contextual integrity","author":"wijesekera","year":"2015","journal-title":"24th USENIX Security Symp"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2014.2315204"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2014.62"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813704"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590312"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813714"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516676"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.2013.1728"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382284"},{"key":"ref40","first-page":"93","article-title":"Milk or wine: Does software security improve with age?","author":"ozment","year":"2006","journal-title":"Proc 15th Usenix Security Symp"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1835804.1835821"},{"key":"ref13","first-page":"1","article-title":"Emerging issues in responsible vulnerability disclosure","author":"cavusoglu","year":"2004","journal-title":"Proc 4th Workshop Econ Inf Security"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.26"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660323"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1999995.2000018"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2736281"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516655"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939927"},{"key":"ref3","first-page":"480","article-title":"Software vulnerability markets: Discoverers and buyers","volume":"8","author":"algarni","year":"2014","journal-title":"Int J Comput Elect Autom Control Inf Eng"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2001.991552"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2630069"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0226"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1126\/science.1130992"},{"key":"ref49","first-page":"351","article-title":"EASEAndroid: Automatic policy analysis and refinement for security enhanced android via large-scale semi-supervised learning","author":"wang","year":"2015","journal-title":"24th USENIX Security Symp"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.1070.0771"},{"key":"ref46","first-page":"749","article-title":"Android smartphone third party advertising library data leak analysis","author":"short","year":"2015","journal-title":"Proc IEEE Int Conf Mobile Ad-hoc Sensor Syst"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227141"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1126\/science.1167053"},{"key":"ref47","first-page":"33","article-title":"Measuring the longitudinal evolution of the online anonymous marketplace ecosystem","author":"soska","year":"2015","journal-title":"24th USENIX Security Symp"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.17"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2093548.2093553"},{"key":"ref43","first-page":"1041","article-title":"Vulnerability disclosure in the age of social media: Exploiting Twitter for predicting real-world exploits","author":"sabottke","year":"2015","journal-title":"24th USENIX Security Symp"}],"container-title":["IEEE Transactions on Services Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4629386\/8984641\/07802638.pdf?arnumber=7802638","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:12:36Z","timestamp":1651079556000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7802638\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,1,1]]},"references-count":58,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tsc.2016.2646687","relation":{},"ISSN":["1939-1374","2372-0204"],"issn-type":[{"value":"1939-1374","type":"electronic"},{"value":"2372-0204","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,1,1]]}}}