{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T16:51:34Z","timestamp":1783183894328,"version":"3.54.6"},"reference-count":517,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2017,6,1]],"date-time":"2017-06-01T00:00:00Z","timestamp":1496275200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2017,6,1]],"date-time":"2017-06-01T00:00:00Z","timestamp":1496275200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2017,6,1]],"date-time":"2017-06-01T00:00:00Z","timestamp":1496275200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2017,6,1]],"date-time":"2017-06-01T00:00:00Z","timestamp":1496275200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-1252644"],"award-info":[{"award-number":["CCF-1252644"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1629771"],"award-info":[{"award-number":["CNS-1629771"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-1618132"],"award-info":[{"award-number":["CCF-1618132"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["D11AP00282"],"award-info":[{"award-number":["D11AP00282"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF-09-1-0273"],"award-info":[{"award-number":["W911NF-09-1-0273"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000180","name":"Department of Homeland Security","doi-asserted-by":"publisher","award":["HSHQDC-14-C-B0040"],"award-info":[{"award-number":["HSHQDC-14-C-B0040"]}],"id":[{"id":"10.13039\/100000180","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000181","name":"Air Force Office of Scientific Research","doi-asserted-by":"publisher","award":["FA95501610030"],"award-info":[{"award-number":["FA95501610030"]}],"id":[{"id":"10.13039\/100000181","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2017,6,1]]},"DOI":"10.1109\/tse.2016.2615307","type":"journal-article","created":{"date-parts":[[2016,10,5]],"date-time":"2016-10-05T19:41:49Z","timestamp":1475696509000},"page":"492-530","source":"Crossref","is-referenced-by-count":109,"title":["A Taxonomy and Qualitative Comparison of Program Analysis Techniques for Security Assessment of Android Software"],"prefix":"10.1109","volume":"43","author":[{"given":"Alireza","family":"Sadeghi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hamid","family":"Bagheri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joshua","family":"Garcia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sam","family":"Malek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref275","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-03584-0_27"},{"key":"ref274","article-title":"Apex: Extending Android permission model and enforcement with user-defined runtime constraints","author":"nauman","year":"0"},{"key":"ref277","doi-asserted-by":"publisher","DOI":"10.1145\/1999732.1999740"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.50"},{"key":"ref271","first-page":"291","article-title":"Androidleaks: Automatically detecting potential privacy leaks in Android applications on a large scale","author":"gibler","year":"0","journal-title":"Proc International Conference on Trust and Trustworthy Computing"},{"key":"ref270","article-title":"Andarwin: Scalable detection of semantically similar Android applications","author":"crussell","year":"0"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.54"},{"key":"ref273","article-title":"AntiMalDroid: An efficient SVM-based malware detection framework for Android","author":"zhao","year":"0"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1109\/BADGERS.2014.7"},{"key":"ref172","article-title":"The ded decompiler","author":"octeau","year":"2010"},{"key":"ref171","year":"0"},{"key":"ref174","article-title":"Soot—a Java bytecode optimization framework","author":"vall\u00e9e-rai","year":"0"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393600"},{"key":"ref176","year":"0"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1145\/2259051.2259056"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818036"},{"key":"ref177","article-title":"Artdroid: A virtual-method hooking framework on Android art runtime","author":"costamagna","year":"0"},{"key":"ref168","article-title":"How useful are existing monitoring languages for securing Android apps?","author":"arzt","year":"0"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664250"},{"key":"ref267","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.49"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1145\/2516760.2516769"},{"key":"ref269","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.93"},{"key":"ref288","article-title":"Revealing privacy-impacting behavior patterns of smartphone applications","author":"bal","year":"2012","journal-title":"Proc Workshop Mobile Secur Technol (MoST)"},{"key":"ref287","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_38"},{"key":"ref286","article-title":"Towards discovering and understanding unexpected hazards in tailoring antivirus software for Android","author":"huang","year":"0"},{"key":"ref285","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660287"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1145\/360248.360252"},{"key":"ref284","article-title":"Aurasium: Practical policy enforcement for Android applications","author":"xu","year":"0"},{"key":"ref180","year":"0"},{"key":"ref283","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818005"},{"key":"ref282","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568301"},{"key":"ref281","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435379"},{"key":"ref185","article-title":"Effective real-time Android application auditing","author":"xia","year":"0"},{"key":"ref280","article-title":"Apposcopy: Semantics-based detection of Android malware","author":"feng","year":"0"},{"key":"ref184","article-title":"App-ray: User-driven and fully automated Android app security assessment","author":"titze","year":"2013","journal-title":"Fraunhofer AISEC TechReport"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660357"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.33"},{"key":"ref189","article-title":"Appguard-enforcing user requirements on Android apps","author":"backes","year":"0"},{"key":"ref188","article-title":"These aren’t the droids you’re looking for: Retrofitting Android to protect data from imperious applications","author":"hornyack","year":"0"},{"key":"ref187","article-title":"Appcracker: Widespread vulnerabilities in user and session authentication in mobile apps","author":"cai","year":"2014"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.48"},{"key":"ref179","article-title":"Automated whitebox fuzz testing","author":"godefroid","year":"0"},{"key":"ref278","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435378"},{"key":"ref279","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516676"},{"key":"ref293","article-title":"Detecting GPS information leakage in Android applications","author":"ma","year":"0"},{"key":"ref292","doi-asserted-by":"publisher","DOI":"10.1109\/CTS.2013.6567221"},{"key":"ref295","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.80"},{"key":"ref294","article-title":"Detecting Android malware using sequences of system calls","author":"canfora","year":"0"},{"key":"ref297","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666631"},{"key":"ref296","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590312"},{"key":"ref299","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref298","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2355839"},{"key":"ref154","article-title":"Towards taming privilege-escalation attacks on Android","author":"bugiel","year":"0"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484355"},{"key":"ref155","year":"0"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC-CSS-ICESS.2015.39"},{"key":"ref291","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2013.6693128"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2322867"},{"key":"ref290","article-title":"What the app is that? deception and countermeasures in the Android user interface","author":"bianchi","year":"0"},{"key":"ref151","article-title":"Systematic detection of capability leaks in stock Android smartphones","author":"grace","year":"0"},{"key":"ref146","article-title":"A study of Android application security","author":"enck","year":"0"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413694"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/PERCOM.2004.1276868"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_18"},{"key":"ref289","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2011.6112328"},{"key":"ref167","article-title":"How current Android malware seeks to evade automated code analysis","author":"rasthofer","year":"0"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590325"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1145\/2689702.2689704"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592796"},{"key":"ref163","article-title":"On the effectiveness of dynamic taint analysis for protecting against private information leaks on Android-based devices","author":"sarwar","year":"0"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/996821.996823"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1007\/11575467_11"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-18681-8_24"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23802-9_24"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2290431"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37300-8_5"},{"key":"ref197","article-title":"Bifocals: Analyzing webview vulnerabilities in Android applications","author":"chin","year":"0"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.59"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818033"},{"key":"ref193","article-title":"ASM: A programmable interface for extending Android security","author":"heuser","year":"0"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818024"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19249-9_6"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.39"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435380"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23255"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516677"},{"key":"ref200","article-title":"Modelling analysis and auto-detection of cryptographic misuse in Android applications","author":"shao","year":"0"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/2491956.2462186"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786879"},{"key":"ref500","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21599-5_8"},{"key":"ref501","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.39"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516693"},{"key":"ref504","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref409","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295141"},{"key":"ref505","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2512496"},{"key":"ref502","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41157-1_5"},{"key":"ref407","doi-asserted-by":"publisher","DOI":"10.1109\/EISIC.2012.34"},{"key":"ref503","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199462"},{"key":"ref408","article-title":"Instance-based anomaly method for Android malware detection","author":"sanz","year":"0"},{"key":"ref508","article-title":"Fuzzing the phone in your phone","author":"miller","year":"0"},{"key":"ref203","article-title":"Activity spoofing and its defense in Android smartphones","author":"cooley","year":"0"},{"key":"ref405","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref509","doi-asserted-by":"publisher","DOI":"10.1145\/1554339.1554341"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1145\/2351676.2351722"},{"key":"ref406","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480706"},{"key":"ref506","article-title":"AndroTotal: A flexible, scalable toolbox and service for testing mobile malware detectors","author":"maggi","year":"0"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08344-5_31"},{"key":"ref403","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557549"},{"key":"ref507","year":"0"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2015.238"},{"key":"ref404","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2366457"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766499"},{"key":"ref401","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2013.6693097"},{"key":"ref208","article-title":"Crepe: Context-related policy enforcement for Android","author":"conti","year":"0"},{"key":"ref402","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664275"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2015.2419611"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.233"},{"key":"ref400","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_34"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557557"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2012.114"},{"key":"ref510","year":"0"},{"key":"ref511","year":"0"},{"key":"ref512","year":"0"},{"key":"ref513","year":"0"},{"key":"ref418","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.373"},{"key":"ref514","year":"0"},{"key":"ref419","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381950"},{"key":"ref515","year":"0"},{"key":"ref516","article-title":"2015 internet security threat report","author":"response","year":"2015"},{"key":"ref517","author":"ford","year":"2000","journal-title":"Secure Electronic Commerce Building the Infrastructure for Digital Signatures and Encryption"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484359"},{"key":"ref414","article-title":"Capturing Android malware behaviour using system flow graph","author":"andriatsimandefitra","year":"0"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1145\/2185448.2185466"},{"key":"ref415","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2010.77"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.477"},{"key":"ref416","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2320731"},{"key":"ref215","article-title":"Automated dynamic enforcement of synthesized security policies in Android","author":"bagheri","year":"2015"},{"key":"ref417","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.52"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590313"},{"key":"ref410","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.375"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1109\/SAI.2015.7237151"},{"key":"ref411","article-title":"SCANDAL: Static analyzer for detecting privacy leaks in Android applications","author":"kim","year":"2012","journal-title":"IEEE Mobile Secur Technol (MoST) in Conjunction IEEE Symp Secur Privacy"},{"key":"ref218","article-title":"Effective inter-component communication mapping in Android: An essential step towards holistic security analysis","author":"octeau","year":"0"},{"key":"ref412","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2009.5199486"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_1"},{"key":"ref413","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.010"},{"key":"ref420","article-title":"Model-checking for Android malware detection","author":"song","year":"0"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766519"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818042"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.10.005"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1145\/2659651.2659716"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381948"},{"key":"ref227","article-title":"Juxtapp: A scalable system for detecting code reuse among Android applications","author":"hanna","year":"0"},{"key":"ref226","article-title":"IVDroid: Static detection for input validation vulnerability in Android inter-component communication","author":"fang","year":"0"},{"key":"ref225","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.16"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813648"},{"key":"ref127","article-title":"Andlantis: Large-scale Android dynamic analysis","author":"bierma","year":"2014","journal-title":"arXiv 1410 7751"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420958"},{"key":"ref125","first-page":"490","article-title":"Analysis of Android malware detection performance using machine learning classifiers","author":"ham","year":"0","journal-title":"Proc Int Conf ICT Convergence"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/2699026.2699114"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076781"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_5"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2013.134"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590335"},{"key":"ref134","article-title":"The man who was there: Validating check-ins in location-based services","author":"polakis","year":"0"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_8"},{"key":"ref132","article-title":"Peeking into your app without actually seeing it: UI state inference and novel Android attacks","author":"chen","year":"0"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1145\/2448556.2448610"},{"key":"ref230","article-title":"Lintent: Towards security type-checking of Android applications","author":"bugliesi","year":"0"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2012.43"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523679"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1179"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23323"},{"key":"ref234","article-title":"A large-scale study of mobile web app security","author":"mutchler","year":"2015","journal-title":"Proc Workshop Mobile Secur Technol (MoST)"},{"key":"ref237","article-title":"Danger is my middle name: Experimenting with SSL vulnerabilities in Android apps","author":"onwuzurike","year":"0"},{"key":"ref236","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660275"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2014.12"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.92"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2013.6703686"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.64"},{"key":"ref139","article-title":"A framework for evaluating mobile app repackaging detection algorithms","author":"huang","year":"0"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23802-9_32"},{"key":"ref141","year":"0"},{"key":"ref142","year":"0"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557421"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.2"},{"key":"ref144","author":"swiderski","year":"2004","journal-title":"Threat Modeling"},{"key":"ref1","article-title":"Market share: Ultramobiles by region, OS and form factor, 4Q13 and 2013","author":"cozza","year":"2014"},{"key":"ref145","article-title":"Detecting passive content leaks and pollution in Android applications","author":"zhou","year":"0"},{"key":"ref241","first-page":"91","article-title":"Curbing Android permission creep","author":"vidas","year":"0","journal-title":"Proc Secur Privacy Workshops"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2013.2284403"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23328"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.50"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2013.6693092"},{"key":"ref247","article-title":"SCanDroid: Automated security certification of Android applications, Department of Computer Science, University of Maryland, College Park, Tech. Rep. CS-TR-4991","author":"fuchs","year":"2009"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.56"},{"key":"ref245","article-title":"Towards discovering and understanding task hijacking in Android","author":"ren","year":"0"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.32"},{"key":"ref109","doi-asserted-by":"crossref","first-page":"348","DOI":"10.1007\/978-3-642-41284-4_18","article-title":"Mobile malware detection based on energy fingerprints a dead end?","author":"hoffmann","year":"2013","journal-title":"Research in Attacks Intrusions and Defenses"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23802-9_29"},{"key":"ref107","article-title":"Leave me alone: App-level protection against runtime information gathering on Android","author":"zhang","year":"0"},{"key":"ref106","article-title":"Puma: Permission usage to detect malware in Android","author":"sanz","year":"0"},{"key":"ref105","article-title":"Apkcombiner: Combining multiple Android apps to support inter-app analysis","author":"li","year":"0"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2465430"},{"key":"ref102","article-title":"Instrumenting Android and Java applications as easy as abc","author":"arzt","year":"0"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2013.6583806"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ICRCC.2012.6450572"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046620"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516728"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-29613-5_11"},{"key":"ref254","article-title":"Supor: Precise and scalable sensitive user input detection for Android apps","author":"huang","year":"0"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660302"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23205"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28658-7_57"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516689"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1145\/2695664.2695679"},{"key":"ref259","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714583"},{"key":"ref10","article-title":"Security enhanced (SE) Android: Bringing flexible MAC to Android","author":"smalley","year":"0"},{"key":"ref258","article-title":"Wechecker: Efficient and precise detection of privilege escalation vulnerabilities in Android apps","author":"cui","year":"0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381938"},{"key":"ref12","article-title":"Permission re-delegation: Attacks and defenses","author":"felt","year":"0"},{"key":"ref13","article-title":"XManDroid: A new Android evolution to mitigate privilege escalation attacks","author":"bugiel","year":"2011"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_33"},{"key":"ref15","article-title":"A conundrum of permissions: Installing applications on an Android smartphone","author":"kelley","year":"0"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"ref118","article-title":"Madfraud: Investigating ad fraud in Android applications","author":"crussell","year":"0"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623705"},{"key":"ref117","article-title":"Taming the Android appstore: Lightweight characterization of Android applications","author":"vigneri","year":"2015","journal-title":"arXiv 1504 06093"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2785830.2785845"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2004.21"},{"key":"ref119","article-title":"Guess who’s texting you? evaluating the security of smartphone messaging applications","author":"schrittwieser","year":"0"},{"key":"ref114","article-title":"Investigating user privacy in Android ad libraries","author":"stevens","year":"0"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ICBNMT.2011.6156010"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/2808117.2808120"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2010.1057"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523657"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076791"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413693"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-010-0148-x"},{"key":"ref260","doi-asserted-by":"publisher","DOI":"10.2991\/ccis-13.2013.22"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666630"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23287"},{"key":"ref263","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2010.5665792"},{"key":"ref264","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref265","doi-asserted-by":"publisher","DOI":"10.1109\/WICT.2014.7077314"},{"key":"ref266","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-014-0226-7"},{"key":"ref365","doi-asserted-by":"publisher","DOI":"10.1109\/WCSE.2012.26"},{"key":"ref364","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653691"},{"key":"ref363","article-title":"A malicious application detection framework using automatic feature extraction tool on Android market","author":"kim","year":"0","journal-title":"Proc 3rd Int Conf Comput Sci Inf Technol"},{"key":"ref362","doi-asserted-by":"publisher","DOI":"10.1145\/2791405.2791558"},{"key":"ref361","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2013.35"},{"key":"ref360","article-title":"Android Botnets: What URLs are telling us","author":"kadir","year":"0"},{"key":"ref498","first-page":"550","article-title":"DroidLogger: Reveal suspicious behavior of Android applications via instrumentation","author":"dai","year":"0","journal-title":"Proc 7th Int Conf Comput Convergence Technol"},{"key":"ref39","article-title":"Automatic mediation of privacy-sensitive resource access in smartphone applications","author":"livshits","year":"0"},{"key":"ref499","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37682-5_7"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403024"},{"key":"ref33","article-title":"Procedures for performing systematic reviews","volume":"33","author":"kitchenham","year":"2004"},{"key":"ref32","first-page":"3","article-title":"A survey of Android security threats and defenses","volume":"6","author":"rashidi","year":"2015","journal-title":"J Wireless Mobile Netw Ubiquitous Comput Dependable Appl"},{"key":"ref31","article-title":"Securing Android: A survey, taxonomy, and challenges","volume":"47","author":"tan","year":"2015","journal-title":"ACM Comput Survey"},{"key":"ref359","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_40"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.02.001"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1378600.1378626"},{"key":"ref357","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480672"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464460"},{"key":"ref358","doi-asserted-by":"publisher","DOI":"10.1145\/2554850.2559915"},{"key":"ref35","article-title":"PIoS: Detecting privacy leaks in IoS applications","author":"egele","year":"0"},{"key":"ref355","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.377"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2006.07.009"},{"key":"ref356","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2011.226"},{"key":"ref352","article-title":"On the need of precise inter-app ICC classification for detecting Android malware collusions","author":"elish","year":"0","journal-title":"IEEE Mobile Secur Technol (MoST) in Conjunction IEEE Symp Secur Privacy"},{"key":"ref351","article-title":"I-ARM-droid: A rewriting framework for in-app reference monitors for Android applications","author":"davis","year":"0","journal-title":"Mobile Secur Technol"},{"key":"ref354","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714604"},{"key":"ref353","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660343"},{"key":"ref350","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_31"},{"key":"ref491","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.53"},{"key":"ref490","article-title":"I know what leaked in your pocket: Uncovering privacy leaks on Android apps with static taint analysis","author":"li","year":"2014"},{"key":"ref493","article-title":"Information flows as a permission mechanism","author":"shen","year":"0"},{"key":"ref492","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"ref495","doi-asserted-by":"publisher","DOI":"10.1109\/IWAST.2012.6228986"},{"key":"ref494","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2015.239"},{"key":"ref497","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664265"},{"key":"ref496","article-title":"A hybrid approach for mobile security threat analysis","author":"you","year":"0"},{"key":"ref487","doi-asserted-by":"publisher","DOI":"10.1145\/2348543.2348563"},{"key":"ref28","article-title":"Enter sandbox: Android sandbox comparison","author":"neuner","year":"2014"},{"key":"ref488","article-title":"UIPicker: User-input privacy identification in mobile applications","author":"nan","year":"0"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2386139"},{"key":"ref489","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464462"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2746266.2746271"},{"key":"ref348","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2014.8.1.22"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046618"},{"key":"ref349","first-page":"111","article-title":"Performance evaluation on permission-based detection for Android malware","volume":"2","author":"huang","year":"2013","journal-title":"Adv Intell Syst Applicat"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2012.6461012"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.101613.00077"},{"key":"ref344","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2302293"},{"key":"ref24","article-title":"Defending users against smartphone apps: Techniques and future directions","author":"enck","year":"0"},{"key":"ref345","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2014.33"},{"key":"ref23","article-title":"Privacy leakage in mobile computing: Tools, methods, and characteristics","author":"haris","year":"2014"},{"key":"ref346","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35362-8_4"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"},{"key":"ref347","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413692"},{"key":"ref25","article-title":"Google Android: A state-of-the-art review of security mechanisms","author":"shabtai","year":"2009"},{"key":"ref383","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516727"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627396"},{"key":"ref382","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04283-1_5"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2516760.2516765"},{"key":"ref381","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.09.014"},{"key":"ref380","doi-asserted-by":"publisher","DOI":"10.1109\/TST.2013.6574680"},{"key":"ref387","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04283-1_25"},{"key":"ref386","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.30"},{"key":"ref385","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2014.6999415"},{"key":"ref384","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.61"},{"key":"ref486","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2012.39"},{"key":"ref485","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19376-7_12"},{"key":"ref484","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866317"},{"key":"ref483","article-title":"Android: From reversing to decompilation","author":"desnos","year":"0"},{"key":"ref482","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_30"},{"key":"ref481","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2013.15"},{"key":"ref480","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2014.13"},{"key":"ref478","article-title":"Big data analytics in cyber defense","author":"institute","year":"2013"},{"key":"ref479","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1145\/54289.871709","article-title":"The confused deputy: (Or why capabilities might have been invented)","volume":"22","author":"hardy","year":"1988","journal-title":"ACM SIGOPS Operating Syst Rev"},{"key":"ref476","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2012.44"},{"key":"ref477","article-title":"Aframe: Isolating advertisements from mobile applications in Android","author":"zhang","year":"0"},{"key":"ref379","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480701"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.58"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2013.121"},{"key":"ref377","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2014.6911805"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.24"},{"key":"ref378","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2014.51"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2556978"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466466"},{"key":"ref54","article-title":"How to ask for permission","author":"felt","year":"0"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_5"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2014.34"},{"key":"ref370","article-title":"MADAM: A multi-level anomaly detector for Android malware","author":"dini","year":"0"},{"key":"ref372","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2014.65"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1247660.1247690"},{"key":"ref371","doi-asserted-by":"publisher","DOI":"10.1080\/01969722.2013.803889"},{"key":"ref374","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-play scale","author":"chen","year":"0"},{"key":"ref373","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.103"},{"key":"ref376","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2013.6947737"},{"key":"ref375","doi-asserted-by":"publisher","DOI":"10.1145\/2462096.2462100"},{"key":"ref473","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627399"},{"key":"ref472","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_14"},{"key":"ref475","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590316"},{"key":"ref474","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813606"},{"key":"ref471","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2012.6461017"},{"key":"ref470","doi-asserted-by":"publisher","DOI":"10.1145\/2351676.2351689"},{"key":"ref469","article-title":"Taming information-stealing smartphone applications (on Android)","author":"zhou","year":"0"},{"key":"ref4","article-title":"Privilege escalation attacks on Android","author":"davi","year":"0"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1999995.2000018"},{"key":"ref6","article-title":"A small but non-negligible flaw in the Android permission scheme","author":"shin","year":"0"},{"key":"ref5","article-title":"Quire: Lightweight provenance for smart phone operating systems","author":"dietz","year":"0"},{"key":"ref465","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818037"},{"key":"ref8","article-title":"Messing with Android’s permission model","author":"egners","year":"0"},{"key":"ref466","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2300482"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.007"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046623"},{"key":"ref467","article-title":"Practical always-on taint tracking on mobile devices","author":"paupore","year":"0"},{"key":"ref468","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920295"},{"key":"ref9","article-title":"Flexible and fine-grained mandatory access control on Android for diverse security and privacy policies","author":"bugiel","year":"0"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23164"},{"key":"ref366","doi-asserted-by":"publisher","DOI":"10.7763\/IJCCE.2013.V2.197"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666629"},{"key":"ref367","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2015.88"},{"key":"ref368","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20376-8_34"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714598"},{"key":"ref47","article-title":"Boxify: Full-fledged app sandboxing for stock Android","author":"backes","year":"0"},{"key":"ref369","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.93"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484316"},{"key":"ref41","article-title":"Decaf: Detecting and characterizing ad fraud in mobile apps","author":"liu","year":"0"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046624"},{"key":"ref43","article-title":"XIoS: Extended application sandboxing on IoS","author":"bucicoiu","year":"0"},{"key":"ref460","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_43"},{"key":"ref463","doi-asserted-by":"publisher","DOI":"10.1145\/2184489.2184500"},{"key":"ref464","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26555-1_43"},{"key":"ref461","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2012.10.006"},{"key":"ref462","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666626"},{"key":"ref320","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557571"},{"key":"ref321","doi-asserted-by":"publisher","DOI":"10.1145\/2663761.2664223"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.53"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818041"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.24"},{"key":"ref70","article-title":"Scippa: System-centric IPC provenance on Android","author":"backes","year":"0"},{"key":"ref318","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1016\/j.jnca.2013.05.008","article-title":"Detecting mobile malware threats to homeland security through static analysis","volume":"38","author":"seo","year":"2014","journal-title":"J Netw Comput Appl"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714632"},{"key":"ref317","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.25"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/2414456.2414498"},{"key":"ref316","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2800004"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2245276.2232012"},{"key":"ref315","article-title":"Detection, classification and characterization of Android malware using API data dependency","author":"li","year":"0"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627397"},{"key":"ref314","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"ref313","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2800003"},{"key":"ref312","article-title":"Attack of the clones: Detecting cloned applications on Android markets","author":"crussell","year":"0"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/2245276.2232009"},{"key":"ref311","doi-asserted-by":"publisher","DOI":"10.1145\/2614628.2614633"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664245"},{"key":"ref457","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-16161-2_19"},{"key":"ref456","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382223"},{"key":"ref455","article-title":"Brahmastra: Driving apps to test the security of third-party components","author":"bhoraskar","year":"0"},{"key":"ref454","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2012.74"},{"key":"ref459","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2012.14"},{"key":"ref458","article-title":"DroidTest: Testing Android applications for leakage of private information","author":"rumee","year":"0"},{"key":"ref319","article-title":"DroidAPIMiner: Mining API-level features for robust malware detection in Android","author":"aafer","year":"0"},{"key":"ref450","article-title":"AdSplit: Separating smartphone advertising from applications","author":"shekhar","year":"0"},{"key":"ref451","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24369-6_1"},{"key":"ref452","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.69"},{"key":"ref453","article-title":"A Bayesian approach to privacy enforcement in smartphones","author":"tripp","year":"0"},{"key":"ref310","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.07.106"},{"key":"ref60","first-page":"27","article-title":"Identidroid: Android can finally wear its anonymous suit","volume":"7","author":"shebaro","year":"2014","journal-title":"Trans Data Privacy"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766518"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.8"},{"key":"ref305","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_4"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523676"},{"key":"ref304","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046619"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_15"},{"key":"ref307","article-title":"Owner-centric protection of unstructured data on smartphones","author":"zhou","year":"0"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557558"},{"key":"ref306","article-title":"SVM-based malware detection for Android applications","author":"dai","year":"0"},{"key":"ref66","article-title":"Appink: Watermarking Android apps for repackaging deterrence","author":"zhou","year":"0"},{"key":"ref301","doi-asserted-by":"publisher","DOI":"10.1109\/TSA.2014.10"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2642977"},{"key":"ref300","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.98"},{"key":"ref303","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480673"},{"key":"ref302","article-title":"A system call-centric analysis and stimulation technique to automatically reconstruct Android malware behaviors","author":"reina","year":"0","journal-title":"Proc ACM Eur Workshop Syst Secur"},{"key":"ref444","article-title":"Android permissions remystified: A field study on contextual integrity","author":"wijesekera","year":"0"},{"key":"ref443","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2014.131"},{"key":"ref446","article-title":"Static detection and automatic exploitation of intent message vulnerabilities in Android applications","author":"gallingani","year":"0"},{"key":"ref445","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557560"},{"key":"ref309","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.36"},{"key":"ref448","doi-asserted-by":"publisher","DOI":"10.1109\/ISSA.2013.6641043"},{"key":"ref308","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23263"},{"key":"ref447","article-title":"Fast, scalable detection of “piggybacked","author":"zhou","year":"0"},{"key":"ref449","article-title":"DroidFuzzer: Fuzzing the Android apps with intent-filter tag","author":"ye","year":"0"},{"key":"ref441","doi-asserted-by":"publisher","DOI":"10.1145\/2742647.2742668"},{"key":"ref442","article-title":"A measurement study of tracking in paid mobile applications","author":"seneviratne","year":"0"},{"key":"ref440","article-title":"Don’t kill my ads!: Balancing privacy in an ad-supported mobile application market","author":"leontiadis","year":"0"},{"key":"ref95","article-title":"Hartley’s test ranked opcodes for Android malware analysis","author":"john","year":"0"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.57"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/2751323.2751330"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-01854-6_48"},{"key":"ref342","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523678"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/2523514.2523539"},{"key":"ref343","doi-asserted-by":"publisher","DOI":"10.1145\/2689702.2689705"},{"key":"ref90","article-title":"Andradar: Fast discovery of Android applications in alternative markets","author":"lindorfer","year":"0"},{"key":"ref340","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2013.6703688"},{"key":"ref341","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2015.7405598"},{"key":"ref336","first-page":"55","article-title":"DroidTrack: Tracking and visualizing information diffusion for preventing information leakage on Android","volume":"4","author":"sakamoto","year":"2014","journal-title":"J Internet Services Inf Secur"},{"key":"ref335","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2014.6906344"},{"key":"ref334","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-55415-5_12"},{"key":"ref333","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660359"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.30"},{"key":"ref339","article-title":"User-centric dependence analysis for identifying malicious mobile apps","author":"elish","year":"0","journal-title":"IEEE Mob Sec Tech (MoST) in conjunction with the IEEE Symp Sec Privacy"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.31"},{"key":"ref338","article-title":"EASEAndroid: Automatic policy analysis and refinement for security enhanced Android via large-scale semi-supervised learning","author":"wang","year":"0"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2771284.2771288"},{"key":"ref337","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627404"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23140"},{"key":"ref439","article-title":"Securing embedded user interfaces: Android and beyond","author":"roesner","year":"0"},{"key":"ref438","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2015.63"},{"key":"ref437","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590314"},{"key":"ref436","doi-asserted-by":"publisher","DOI":"10.1145\/2185448.2185464"},{"key":"ref435","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-013-0197-0"},{"key":"ref434","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2013.88"},{"key":"ref433","doi-asserted-by":"publisher","DOI":"10.1109\/PASSAT\/SocialCom.2011.151"},{"key":"ref432","article-title":"WuKong: A scalable and accurate two-phase approach to Android app clone detection","author":"wang","year":"0"},{"key":"ref430","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2353996"},{"key":"ref431","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2013.11.037"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54804-8_11"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813669"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627409"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381949"},{"key":"ref330","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39256-6_15"},{"key":"ref331","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23089"},{"key":"ref80","article-title":"Whyper: Towards automating risk assessment of mobile applications","author":"pandita","year":"0"},{"key":"ref332","article-title":"DroidScope: Seamlessly reconstructing the OS and Dalvik semantic views for dynamic Android malware analysis","author":"yan","year":"0"},{"key":"ref323","doi-asserted-by":"publisher","DOI":"10.1145\/2556464.2556467"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1002\/sec.675"},{"key":"ref322","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_30"},{"key":"ref325","article-title":"DroidMiner: Automated mining and characterization of fine-grained malicious behaviors in Android applications","author":"yang","year":"0"},{"key":"ref324","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2012.18"},{"key":"ref327","doi-asserted-by":"publisher","DOI":"10.1145\/2484417.2484422"},{"key":"ref85","article-title":"Appwatcher: Unveiling the underground market of trading mobile app reviews","author":"xie","year":"0"},{"key":"ref326","doi-asserted-by":"publisher","DOI":"10.1145\/2133601.2133640"},{"key":"ref429","article-title":"ViewDroid: Towards obfuscation-resilient mobile application repackaging detection","author":"zhang","year":"0"},{"key":"ref86","article-title":"A rapid and scalable method for Android application repackaging detection","author":"jiao","year":"0"},{"key":"ref329","article-title":"Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets","author":"zhou","year":"0","journal-title":"19th Ann Netw Dist Syst Sec Symp"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2014.61"},{"key":"ref328","doi-asserted-by":"publisher","DOI":"10.1109\/ICADIWT.2014.6814679"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2014.95"},{"key":"ref426","article-title":"Dynamic analysis of Android malware","author":"van der veen","year":"2013"},{"key":"ref425","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_35"},{"key":"ref428","article-title":"A static assurance analysis of Android applications","author":"elish","year":"2013"},{"key":"ref427","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382290"},{"key":"ref422","doi-asserted-by":"publisher","DOI":"10.1109\/MSN.2012.43"},{"key":"ref421","doi-asserted-by":"publisher","DOI":"10.1145\/2699026.2699105"},{"key":"ref424","first-page":"669","article-title":"System calls analysis of malwares on Android","volume":"2","author":"tchakount","year":"2013","journal-title":"International Journal of Advanced Science and Tecnology"},{"key":"ref423","doi-asserted-by":"publisher","DOI":"10.1145\/2494522"},{"key":"ref399","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.115"},{"key":"ref389","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920313"},{"key":"ref388","doi-asserted-by":"publisher","DOI":"10.1145\/2843859.2843860"},{"key":"ref390","doi-asserted-by":"publisher","DOI":"10.1145\/1741866.1741874"},{"key":"ref397","doi-asserted-by":"publisher","DOI":"10.1145\/2594368.2594390"},{"key":"ref398","article-title":"PuppetDroid: A user-centric UI exerciser for automatic dynamic analysis of similar Android applications","author":"gianazza","year":"2014","journal-title":"arXiv 1402 4826"},{"key":"ref395","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.79"},{"key":"ref396","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557563"},{"key":"ref393","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382224"},{"key":"ref394","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2013.6698893"},{"key":"ref391","article-title":"Contextual policy enforcement in Android applications with permission event graphs","author":"chen","year":"0"},{"key":"ref392","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2013.53"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/ieeexplore.ieee.org\/ielaam\/32\/7946233\/7583740-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/7946233\/07583740.pdf?arnumber=7583740","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T18:48:20Z","timestamp":1649443700000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7583740\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,6,1]]},"references-count":517,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tse.2016.2615307","relation":{},"ISSN":["0098-5589","1939-3520"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,6,1]]}}}