{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T22:00:09Z","timestamp":1757541609804,"version":"3.37.3"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Spanish Government","award":["ODIO PID2019-111429RB-C21","PID2019-111429RBC22"],"award-info":[{"award-number":["ODIO PID2019-111429RB-C21","PID2019-111429RBC22"]}]},{"name":"Region of Madrid"},{"name":"European Structural Funds ESF"},{"DOI":"10.13039\/501100008530","name":"European Regional Development Fund","doi-asserted-by":"publisher","award":["CYNAMON-CM P2018\/TCS-4566"],"award-info":[{"award-number":["CYNAMON-CM P2018\/TCS-4566"]}],"id":[{"id":"10.13039\/501100008530","id-type":"DOI","asserted-by":"publisher"}]},{"name":"EU H2020"},{"DOI":"10.13039\/501100001821","name":"Vienna Science and Technology Fund","doi-asserted-by":"publisher","award":["ICT19-056"],"award-info":[{"award-number":["ICT19-056"]}],"id":[{"id":"10.13039\/501100001821","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015798","name":"SBA Research","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100015798","id-type":"DOI","asserted-by":"publisher"}]},{"name":"COMET Centre within the framework of COMET"},{"name":"BMK"},{"DOI":"10.13039\/501100012416","name":"Bundesministerium f\u00fcr Digitalisierung und Wirtschaftsstandort","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012416","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100012818","name":"Comunidad de Madrid","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100012818","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008530","name":"European Regional Development Fund","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100008530","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2023,4,1]]},"DOI":"10.1109\/tse.2023.3236582","type":"journal-article","created":{"date-parts":[[2023,1,12]],"date-time":"2023-01-12T21:26:11Z","timestamp":1673558771000},"page":"2964-2979","source":"Crossref","is-referenced-by-count":5,"title":["Mixed Signals: Analyzing Software Attribution Challenges in the Android Ecosystem"],"prefix":"10.1109","volume":"49","author":[{"given":"Kaspar","family":"Hageman","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Aarhus Universitet, Aarhus, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6658-1800","authenticated-orcid":false,"given":"\u00c1lvaro","family":"Feal","sequence":"additional","affiliation":[{"name":"IMDEA Networks Institute, Leganés, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4554-8291","authenticated-orcid":false,"given":"Julien","family":"Gamba","sequence":"additional","affiliation":[{"name":"IMDEA Networks Institute, Leganés, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2895-125X","authenticated-orcid":false,"given":"Aniketh","family":"Girish","sequence":"additional","affiliation":[{"name":"IMDEA Networks Institute, Leganés, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jakob","family":"Bleier","sequence":"additional","affiliation":[{"name":"Security and Privacy Research Unit, TU Wien, Vienna, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martina","family":"Lindorfer","sequence":"additional","affiliation":[{"name":"Security and Privacy Research Unit, TU Wien, Vienna, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4573-3967","authenticated-orcid":false,"given":"Juan","family":"Tapiador","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Universidad Carlos III de Madrid, Leganés, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5420-6835","authenticated-orcid":false,"given":"Narseo","family":"Vallina-Rodriguez","sequence":"additional","affiliation":[{"name":"IMDEA Networks Institute, Leganés, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/BADGERS.2014.7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-51966-1_17"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00041"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052712"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278558"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313611"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MOBILESoft.2017.3"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480460"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2591971.2592003"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.tele.2010.05.006"},{"key":"ref12","first-page":"16","article-title":"Whats App? A wide-scale measurement study of smart phone markets","volume-title":"Proc. SIGMOBILE Mobile Comput. Commun. Rev.","volume":"16","author":"D\u2019Heureuse"},{"article-title":"PKCS# 7: Cryptographic message syntax version 1.5. No. rfc2315","year":"1998","author":"Kaliski","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133958"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987462"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_4"},{"article-title":"On the ridiculousness of notice and consent: Contradictions in app privacy policies","volume-title":"Proc. IEEE Workshop Technol. Consum. Protection, Conjunction 39th Symp. Secur. Privacy","author":"Okoyomon","key":"ref21"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_3"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2920314"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771795"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766508"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381949"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516728"},{"key":"ref29","first-page":"659","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-Play scale","volume-title":"Proc. USENIX Secur. Symp.","author":"Chen"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176322"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3230849"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00005"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2901679"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387503"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00013"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417281"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2944684"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243778"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504749"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423662"},{"year":"2018","key":"ref62","article-title":"California consumer privacy act (CCPA)"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00095"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3151137.3151138"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435379"},{"key":"ref66","article-title":"A longitudinal study of pii leaks across Android app versions","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","volume":"10","author":"Ren"},{"key":"ref67","first-page":"3667","article-title":"Share first, ask later (or never?) - studying violations of GDPRs explicit consent in Android apps","volume-title":"Proc. USENIX Secur. Symp.","author":"Nguyen"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00070"},{"key":"ref69","first-page":"603","article-title":"50 ways to leak your data: An exploration of apps\u2019 circumvention of the Android permissions system","volume-title":"Proc. 28th {USENIX} Secur. Symp.","author":"Reardon"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23210"},{"key":"ref76","first-page":"468","article-title":"AndroZoo: Collecting millions of Android apps for the research community","volume-title":"Proc. IEEE Int. Conf. Mining Softw. Repositories","author":"Allix"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987471"},{"key":"ref79","first-page":"142","article-title":"What did really change with the new release of the app?","volume-title":"Proc. 15th Int. Conf. Mining Softw. Repositories","author":"Calciati"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380243"},{"article-title":"Thousands of HiddenAds trojan apps masquerade as Google Play apps","year":"2020","author":"Chen","key":"ref81"},{"key":"ref83","first-page":"231","article-title":"Why are Android apps removed from Google Play?: A large-scale empirical study","volume-title":"Proc. IEEE 15th Int. Conf. Mining Softw. Repositories","author":"Wang"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/34.232078"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23034"},{"key":"ref88","first-page":"531","article-title":"Polisis: Automated analysis and presentation of privacy policies using deep learning","volume-title":"Proc. USENIX Secur. Symp.","author":"Harkous"},{"key":"ref89","first-page":"585","article-title":"PolicyLint: Investigating internal privacy policy contradictions on Google Play","volume-title":"Proc. 28th {USENIX} Secur. Symp.","author":"Andow"},{"issue":"1","key":"ref98","first-page":"35","article-title":"A set of measures of centrality based on betweenness","volume-title":"Sociometry","volume":"40","author":"Freeman","year":"1977"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00067"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/10103953\/10015797.pdf?arnumber=10015797","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T05:12:36Z","timestamp":1710393156000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10015797\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,1]]},"references-count":56,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tse.2023.3236582","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"type":"print","value":"0098-5589"},{"type":"electronic","value":"1939-3520"},{"type":"electronic","value":"2326-3881"}],"subject":[],"published":{"date-parts":[[2023,4,1]]}}}