{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T16:36:37Z","timestamp":1784392597086,"version":"3.55.0"},"reference-count":42,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,10]]},"DOI":"10.1109\/vlhcc.2018.8506574","type":"proceedings-article","created":{"date-parts":[[2018,10,25]],"date-time":"2018-10-25T23:44:51Z","timestamp":1540511091000},"page":"137-146","source":"Crossref","is-referenced-by-count":29,"title":["A Large-Scale Empirical Study on Android Runtime-Permission Rationale Messages"],"prefix":"10.1109","author":[{"given":"Xueqing","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yue","family":"Leng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenyu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengxiang","family":"Zhai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1181"},{"key":"ref38","year":"2018","journal-title":"Implementing a CNN for text classification in TensorFlow"},{"key":"ref33","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1007\/978-3-642-41320-9_7","article-title":"Sorry, I don't get it: An analysis of warning message texts","author":"harbach","year":"2013","journal-title":"Financial Cryptography and Data Security"},{"key":"ref32","first-page":"219","volume":"33","author":"wogalter","year":"2002","journal-title":"Research-based guidelines for warning design and evaluation"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488395"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.51"},{"key":"ref37","year":"0","journal-title":"Runtime peRMission rationale project website"},{"key":"ref36","year":"2018","journal-title":"APKPure website"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.25"},{"key":"ref34","first-page":"1","article-title":"A design space for effective privacy notices","author":"schaub","year":"2015","journal-title":"Proceedings of the Symposium On Usable Privacy and Security"},{"key":"ref10","first-page":"527","article-title":"WHYPER: Towards automating risk assessment of mobile applications","author":"pandita","year":"2013","journal-title":"Proceedings of the USENIX Security Symposium"},{"key":"ref40","year":"2018","journal-title":"Pearson Correlation Coefficient"},{"key":"ref11","article-title":"Mining Android app descriptions for permission requirements recommendation","author":"liu","year":"2018","journal-title":"Proceedings of the International Conference of Requirements Engineering"},{"key":"ref12","year":"2018","journal-title":"Android permission groups"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025706"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1145\/2556288.2557400","article-title":"The effect of developer-specified explanations for permission requests on smartphone user behavior","author":"tan","year":"2014","journal-title":"Proceedings of the SIGCHI conference on Human factors in computing systems"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557549"},{"key":"ref16","year":"2018","journal-title":"Should show request permission rationale API"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568301"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref28","first-page":"1354","article-title":"Au-toCog: Measuring the description-to-permission fidelity in Android applications","author":"qu","year":"2014","journal-title":"Proceedings of the ACM Conference on Computer and Communications Security"},{"key":"ref4","first-page":"787","article-title":"Your location has been shared 5, 398 times! A field study on mobile app privacy nudging","author":"almuhimedi","year":"2015","journal-title":"Proceedings of the Annual ACM Conference on Human Factors in Computing Systems"},{"key":"ref27","article-title":"User comfort with Android background resource accesses in different contexts","author":"votipka","year":"2018","journal-title":"Proceedings of the Symposium On Usable Privacy and Security"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"ref6","first-page":"199","article-title":"Modeling users' mobile app privacy preferences: Restoring usability in a sea of permission settings","author":"lin","year":"2014","journal-title":"Proceedings of the Symposium On Usable Privacy and Security"},{"key":"ref29","first-page":"195","article-title":"Exploring decision-making with Android's runtime permission dialogs using in-context surveys","author":"bonne","year":"2017","journal-title":"Proceedings of the Symposium On Usable Privacy and Security"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2370216.2370290"},{"key":"ref8","year":"0","journal-title":"Facebook and cambridge analytical data breach"},{"key":"ref7","first-page":"303","article-title":"AppCon-text: Differentiating malicious and benign mobile app behaviors using context","author":"yang","year":"2015","journal-title":"Proceedings of the International Conference on Software Engineering"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"ref9","first-page":"68","article-title":"A conundrum of permissions: Installing applications on an Android smartphone","author":"kelley","year":"2012","journal-title":"Financial Cryptography Workshops"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref20","first-page":"101","author":"nissenbaum","year":"2004","journal-title":"Privacy as Contextual Integrity"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.24"},{"key":"ref21","first-page":"499","article-title":"Android permissions remystified: A field study on contextual integrity","author":"wijesekera","year":"2015","journal-title":"Proceedings of the USENIX Security Symposium"},{"key":"ref42","year":"0","journal-title":"WHYPER tool"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098247"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.3115\/1219840.1219885"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466466"},{"key":"ref26","article-title":"Contextual policy enforcement in Android applications with permission event graphs","author":"chen","year":"2013","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2971648.2971693"}],"event":{"name":"2018 IEEE Symposium on Visual Languages and Human-Centric Computing (VL\/HCC)","location":"Lisbon","start":{"date-parts":[[2018,10,1]]},"end":{"date-parts":[[2018,10,4]]}},"container-title":["2018 IEEE Symposium on Visual Languages and Human-Centric Computing (VL\/HCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8488603\/8506479\/08506574.pdf?arnumber=8506574","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T21:26:22Z","timestamp":1643232382000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8506574\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/vlhcc.2018.8506574","relation":{},"subject":[],"published":{"date-parts":[[2018,10]]}}}