{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T15:02:55Z","timestamp":1784300575821,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,11,9]],"date-time":"2009-11-09T00:00:00Z","timestamp":1257724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,11,9]]},"DOI":"10.1145\/1653662.1653691","type":"proceedings-article","created":{"date-parts":[[2009,11,11]],"date-time":"2009-11-11T13:02:08Z","timestamp":1257944528000},"page":"235-245","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":600,"title":["On lightweight mobile phone application certification"],"prefix":"10.1145","author":[{"given":"William","family":"Enck","sequence":"first","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Machigar","family":"Ongtang","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"McDaniel","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2009,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"AdMob. AdMob Mobile Metrics Report. http:\/\/www.admob.com\/marketing\/pdf\/ mobile_metrics_feb_09.pdf February 2009.  AdMob. AdMob Mobile Metrics Report. http:\/\/www.admob.com\/marketing\/pdf\/ mobile_metrics_feb_09.pdf February 2009."},{"key":"e_1_3_2_1_3_1","unstructured":"Apple Inc. Get Ready for iPhone OS 3.0. http:\/\/developer.apple.com\/iphone\/ program\/sdk.html. Accessed April 2009.  Apple Inc. Get Ready for iPhone OS 3.0. http:\/\/developer.apple.com\/iphone\/ program\/sdk.html. Accessed April 2009."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1378600.1378626"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1247660.1247690"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1253568"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2004.21"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2008.02.001"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.26"},{"key":"e_1_3_2_1_12_1","unstructured":"F-Secure Corporation. Virus Description: Cabir. http:\/\/www.f-secure.com\/v-descs\/cabir.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Cabir. http:\/\/www.f-secure.com\/v-descs\/cabir.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_13_1","unstructured":"F-Secure Corporation. Virus Description: Cardblock.A. http:\/\/www.f-secure.com\/v-descs\/cardblock_a.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Cardblock.A. http:\/\/www.f-secure.com\/v-descs\/cardblock_a.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_14_1","unstructured":"F-Secure Corporation. Virus Description: Commwarrior. http:\/\/www.f-secure.com\/v-descs\/commwarrior.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Commwarrior. http:\/\/www.f-secure.com\/v-descs\/commwarrior.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_15_1","unstructured":"F-Secure Corporation. Virus Description: Drever.A. http:\/\/www.f-secure.com\/v-descs\/drever_ a.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Drever.A. http:\/\/www.f-secure.com\/v-descs\/drever_ a.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_16_1","unstructured":"F-Secure Corporation. Virus Description: Lasco.A. http:\/\/www.f-secure.com\/v-descs\/lasco_a.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Lasco.A. http:\/\/www.f-secure.com\/v-descs\/lasco_a.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_17_1","unstructured":"F-Secure Corporation. Virus Description: Pbstealer.A. http:\/\/www.f-secure.com\/v-descs\/pbstealer_a.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Pbstealer.A. http:\/\/www.f-secure.com\/v-descs\/pbstealer_a.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_18_1","unstructured":"F-Secure Corporation. Virus Description: Skulls.A. http:\/\/www.f-secure.com\/v-descs\/skulls.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Skulls.A. http:\/\/www.f-secure.com\/v-descs\/skulls.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_19_1","unstructured":"F-Secure Corporation. Virus Description: Viver.A. http:\/\/www.f-secure.com\/v-descs\/trojan_ symbos_viver_a.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Viver.A. http:\/\/www.f-secure.com\/v-descs\/trojan_ symbos_viver_a.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_20_1","unstructured":"F-Secure Corporation. Virus Description: Worm:SymbOS\/Yxe.A. http:\/\/www.f-secure.com\/v-descs\/worm_symbos_yxe.shtml. Accessed March 2009.  F-Secure Corporation. Virus Description: Worm:SymbOS\/Yxe.A. http:\/\/www.f-secure.com\/v-descs\/worm_symbos_yxe.shtml. Accessed March 2009."},{"key":"e_1_3_2_1_21_1","unstructured":"F-Secure Corporation. Telia Sonera Finland and F-Secure united against mobile viruses: Cabir spreads at the World Championships. http:\/\/www.f-secure.com\/en_EMEA\/about-us\/pressroom\/news\/2005\/fs_news_20050811_1_eng.html August 2005.  F-Secure Corporation. Telia Sonera Finland and F-Secure united against mobile viruses: Cabir spreads at the World Championships. http:\/\/www.f-secure.com\/en_EMEA\/about-us\/pressroom\/news\/2005\/fs_news_20050811_1_eng.html August 2005."},{"key":"e_1_3_2_1_22_1","unstructured":"F-Secure Corporation. Just because it's Signed doesn't meanit isn't spying on you. http:\/\/www.f-secure.com\/ weblog\/archives\/00001190.html May 2007.  F-Secure Corporation. Just because it's Signed doesn't meanit isn't spying on you. http:\/\/www.f-secure.com\/ weblog\/archives\/00001190.html May 2007."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314402"},{"key":"e_1_3_2_1_24_1","volume-title":"Emerging Cyber Threats Report for","author":"Georgia Tech Information Security Center","year":"2009","unstructured":"Georgia Tech Information Security Center . Emerging Cyber Threats Report for 2009 . http:\/\/www.gtisc.gatech.edu\/pdf\/CyberThreatsReport2009.pdf, October 2008. Georgia Tech Information Security Center. Emerging Cyber Threats Report for 2009. http:\/\/www.gtisc.gatech.edu\/pdf\/CyberThreatsReport2009.pdf, October 2008."},{"key":"e_1_3_2_1_25_1","volume-title":"Smart-Phone Attacks and Defenses. In Third Workshop on Hot Topics in Networks (HotNets)","author":"Guo C.","year":"2004","unstructured":"C. Guo , H. J. Wang , and W. Zhu . Smart-Phone Attacks and Defenses. In Third Workshop on Hot Topics in Networks (HotNets) , November 2004 . C. Guo, H. J. Wang, and W. Zhu. Smart-Phone Attacks and Defenses. In Third Workshop on Hot Topics in Networks (HotNets), November 2004."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1137627.1137634"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2007.12"},{"key":"e_1_3_2_1_28_1","volume-title":"Mobile Malware. USENIX Security Symposium","author":"Hypponen M.","year":"2007","unstructured":"M. Hypponen . Mobile Malware. USENIX Security Symposium , August 2007 . Invited Talk. M. Hypponen. Mobile Malware. USENIX Security Symposium, August 2007. Invited Talk."},{"key":"e_1_3_2_1_29_1","unstructured":"Independent Security Evaluators. Exploiting Android. http:\/\/securityevaluators.com\/content\/ case-studies\/android\/index.jsp.  Independent Security Evaluators. Exploiting Android. http:\/\/securityevaluators.com\/content\/ case-studies\/android\/index.jsp."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.36"},{"key":"e_1_3_2_1_31_1","volume-title":"October","author":"IEC","year":"2005","unstructured":"ISO\/ IEC 15408--1 Information technology - Security techniques - Evaluation criteria for IT security - Part 1 : Introduction and general model , October 2005 . ISO\/IEC 15408--1 Information technology - Security techniques - Evaluation criteria for IT security - Part 1: Introduction and general model, October 2005."},{"key":"e_1_3_2_1_32_1","unstructured":"S. Lipner and M. Howard. The Trustworthy Computing Security Development Lifecycle. http:\/\/msdn.microsoft.com\/en-us\/library\/ ms995349.aspx March 2005.   S. Lipner and M. Howard. The Trustworthy Computing Security Development Lifecycle. http:\/\/msdn.microsoft.com\/en-us\/library\/ ms995349.aspx March 2005."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.5555\/784590.784691"},{"key":"e_1_3_2_1_34_1","volume-title":"Technical Report CMU\/SEI-2007-TN-021","author":"Mead N. R.","year":"2007","unstructured":"N. R. Mead . How To Compare the Security QualityRequirements Engineering (SQUARE) Method with Other Methods . Technical Report CMU\/SEI-2007-TN-021 , Software Engineering Institute, Carnegie Mellon University , August 2007 . N. R. Mead. How To Compare the Security QualityRequirements Engineering (SQUARE) Method with Other Methods. Technical Report CMU\/SEI-2007-TN-021,Software Engineering Institute, Carnegie Mellon University, August 2007."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_13"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2006.04.002"},{"key":"e_1_3_2_1_37_1","volume-title":"Core Security Requirements Artefacts. Technical report","author":"Moffett J. D.","year":"2004","unstructured":"J. D. Moffett , C. B. Haley , and B. Nuseibeh . Core Security Requirements Artefacts. Technical report , Open University, UK , 2004 . J. D. Moffett, C. B. Haley, and B. Nuseibeh. Core Security Requirements Artefacts. Technical report, Open University, UK, 2004."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1377836.1377862"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/263699.263712"},{"key":"e_1_3_2_1_40_1","unstructured":"Open Web Application Security Project (OWASP) Foundation. CLASP (Comprehensive Lightweight Application Security Process) Project. http:\/\/www.owasp.org\/index.php\/OWASP_CLASP_Project March 2009.  Open Web Application Security Project (OWASP) Foundation. CLASP (Comprehensive Lightweight Application Security Process) Project. http:\/\/www.owasp.org\/index.php\/OWASP_CLASP_Project March 2009."},{"key":"e_1_3_2_1_41_1","unstructured":"Oracle. Oracle Software Security Assurance. http:\/\/www.oracle.com\/security\/ software-security-assurance.html April 2009.  Oracle. Oracle Software Security Assurance. http:\/\/www.oracle.com\/security\/ software-security-assurance.html April 2009."},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of the USENIX Workshop on Large-Scale and Emergent Threats (LEET)","author":"Polychronakis M.","year":"2008","unstructured":"M. Polychronakis , P. Mavrommatis , and N. Provos . GhostTurns Zombie: Exploring the Life Cycle of Web-based Malware . In Proceedings of the USENIX Workshop on Large-Scale and Emergent Threats (LEET) , April 2008 . M. Polychronakis, P. Mavrommatis, and N. Provos. GhostTurns Zombie: Exploring the Life Cycle of Web-based Malware. In Proceedings of the USENIX Workshop on Large-Scale and Emergent Threats (LEET), April 2008."},{"key":"e_1_3_2_1_43_1","first-page":"321","volume-title":"Proceedings of the USENIX Security Symposium","author":"Rueda S.","year":"2008","unstructured":"S. Rueda , D. King , and T. Jaeger . Verifying Compliance of Trusted Programs . In Proceedings of the USENIX Security Symposium , pages 321 -- 334 , August 2008 . S. Rueda, D. King, and T. Jaeger. Verifying Compliance of Trusted Programs. In Proceedings of the USENIX Security Symposium, pages 321--334, August 2008."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-008-0113-x"},{"key":"e_1_3_2_1_45_1","volume-title":"Security Patterns: Integrating Security and Systems Engineering","author":"Schumacher M.","year":"2009","unstructured":"M. Schumacher , E. Fernandez-Buglioni , D. Hybertson , F. Buschmann , and P. Sommerlad . Security Patterns: Integrating Security and Systems Engineering . Wiley , 2009 . M. Schumacher, E. Fernandez-Buglioni, D. Hybertson,F. Buschmann, and P. Sommerlad. Security Patterns: Integrating Security and Systems Engineering. Wiley, 2009."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2006.1705879"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-004-0194-4"},{"key":"e_1_3_2_1_48_1","volume-title":"Special issue: The future of software engineering for security and privacy, 5: 35--47","author":"Yoshioka N.","year":"2008","unstructured":"N. Yoshioka , H. Washizaki , and K. Maruyama . A survey onsecurity patterns. Progress in Informatics , Special issue: The future of software engineering for security and privacy, 5: 35--47 , October 2008 . N. Yoshioka, H. Washizaki, and K. Maruyama. A survey onsecurity patterns. Progress in Informatics, Special issue: The future of software engineering for security and privacy, 5:35--47, October 2008."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314354.1314359"}],"event":{"name":"CCS '09: 16th ACM Conference on Computer and Communications Security 2009","location":"Chicago Illinois USA","acronym":"CCS '09","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 16th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1653662.1653691","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1653662.1653691","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:38:53Z","timestamp":1750253933000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1653662.1653691"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,11,9]]},"references-count":46,"alternative-id":["10.1145\/1653662.1653691","10.1145\/1653662"],"URL":"https:\/\/doi.org\/10.1145\/1653662.1653691","relation":{},"subject":[],"published":{"date-parts":[[2009,11,9]]},"assertion":[{"value":"2009-11-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}