{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T02:50:12Z","timestamp":1784861412165,"version":"3.55.0"},"reference-count":78,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2014,6,1]],"date-time":"2014-06-01T00:00:00Z","timestamp":1401580800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Ministry of Science"},{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["NRF-2008-0062609"],"award-info":[{"award-number":["NRF-2008-0062609"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003621","name":"Ministry of Science, ICT and Future Planning","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003621","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Comput. Syst."],"published-print":{"date-parts":[[2014,6]]},"abstract":"<jats:p>Today\u2019s smartphone operating systems frequently fail to provide users with visibility into how third-party applications collect and share their private data. We address these shortcomings with TaintDroid, an efficient, system-wide dynamic taint tracking and analysis system capable of simultaneously tracking multiple sources of sensitive data. TaintDroid enables realtime analysis by leveraging Android\u2019s virtualized execution environment. TaintDroid incurs only 32% performance overhead on a CPU-bound microbenchmark and imposes negligible overhead on interactive third-party applications. Using TaintDroid to monitor the behavior of 30 popular third-party Android applications, in our 2010 study we found 20 applications potentially misused users\u2019 private information; so did a similar fraction of the tested applications in our 2012 study. Monitoring the flow of privacy-sensitive data with TaintDroid provides valuable input for smartphone users and security service firms seeking to identify misbehaving applications.<\/jats:p>","DOI":"10.1145\/2619091","type":"journal-article","created":{"date-parts":[[2014,7,8]],"date-time":"2014-07-08T12:20:08Z","timestamp":1404822008000},"page":"1-29","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1070,"title":["TaintDroid"],"prefix":"10.1145","volume":"32","author":[{"given":"William","family":"Enck","sequence":"first","affiliation":[{"name":"North Carolina State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Gilbert","sequence":"additional","affiliation":[{"name":"Duke University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seungyeop","family":"Han","sequence":"additional","affiliation":[{"name":"University of Washington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vasant","family":"Tendulkar","sequence":"additional","affiliation":[{"name":"North Carolina State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Byung-Gon","family":"Chun","sequence":"additional","affiliation":[{"name":"Seoul National University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Landon P.","family":"Cox","sequence":"additional","affiliation":[{"name":"Duke University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaeyeon","family":"Jung","sequence":"additional","affiliation":[{"name":"Microsoft Research"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"McDaniel","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anmol N.","family":"Sheth","sequence":"additional","affiliation":[{"name":"Technicolor Research"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2014,6]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2184489.2184500"},{"key":"e_1_2_1_2_1","unstructured":"Apache Harmony. 2011. Apache harmony -- Open source Java platform. http:\/\/harmony.apache.org.  Apache Harmony. 2011. Apache harmony -- Open source Java platform. http:\/\/harmony.apache.org."},{"key":"e_1_2_1_3_1","unstructured":"Apple Inc. 2013. Apples app store downloads top three billion. http:\/\/www.apple.com\/pr\/library\/2013\/01\/07App-Store-Tops-40-Billion-Downloads-with-Almost-Half-in-2012.html.  Apple Inc. 2013. Apples app store downloads top three billion. http:\/\/www.apple.com\/pr\/library\/2013\/01\/07App-Store-Tops-40-Billion-Downloads-with-Almost-Half-in-2012.html."},{"key":"e_1_2_1_4_1","volume-title":"Xmandroid: A new android evolution to mitigate privilege escalation attacks. Tech. rep. TR-2011-04","author":"Bugiel Sven","year":"2011"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046624"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the USENIX Security Symposium.","author":"Bugiel Sven","year":"2013"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.37"},{"key":"e_1_2_1_8_1","unstructured":"Ben Cheng and Bill Buzbee. 2010. A jit compiler for androids dalvik vm. http:\/\/dl.google.com\/googleio\/2010\/android-jit-compiler-androids-dalvik-vm.pdf.  Ben Cheng and Bill Buzbee. 2010. A jit compiler for androids dalvik vm. http:\/\/dl.google.com\/googleio\/2010\/android-jit-compiler-androids-dalvik-vm.pdf."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2006.158"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the 13th USENIX Security Symposium.","author":"Chow Jim","year":"2004"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 13th Information Security Conference (ISC\u201910)","author":"Conti Mauro","year":"2010"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"e_1_2_1_14_1","volume-title":"Cox and Peter Gilbert","author":"Landon","year":"2009"},{"key":"e_1_2_1_15_1","volume-title":"Spandex: Secure password tracking for android. Tech. rep. TR-2014-01","author":"Cox Landon P.","year":"2014"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_2_1_17_1","unstructured":"Chris Davies. 2009. iPhone spyware debated as app library \u201cphones home\u201d. http:\/\/www.slashgear.com\/iphone-spyware-debated-as-app-library-phones-home-1752491\/.  Chris Davies. 2009. iPhone spyware debated as app library \u201cphones home\u201d. http:\/\/www.slashgear.com\/iphone-spyware-debated-as-app-library-phones-home-1752491\/."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464462"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/359636.359712"},{"key":"e_1_2_1_21_1","volume-title":"Proceedings of the 20th USENIX Security Symposium.","author":"Dietz Michael"},{"key":"e_1_2_1_22_1","volume-title":"Proceedings of the USENIX Annual Technical Conference. 233--246","author":"Egele Manuel","year":"2007"},{"key":"e_1_2_1_23_1","volume-title":"Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI\u201910)","author":"Enck William"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/2028067.2028088"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653691"},{"key":"e_1_2_1_26_1","volume-title":"Proceedings of the 20th USENIX Security Symposium.","author":"Felt Adrienne Porter","year":"2011"},{"key":"e_1_2_1_27_1","unstructured":"Michael Fitzpatrick. 2010. Mobile that allows bosses to snoop on staff developed. BBC News. http:\/\/news.bbc.co.uk\/2\/hi\/technology\/8559683.stm.  Michael Fitzpatrick. 2010. Mobile that allows bosses to snoop on staff developed. BBC News. http:\/\/news.bbc.co.uk\/2\/hi\/technology\/8559683.stm."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1999732.1999740"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185448.2185464"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.21"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70748"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268976"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.30"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217939"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046780"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455806"},{"key":"e_1_2_1_37_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS\u201911)","author":"Kang Min Gyung","year":"2011"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294293"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.6"},{"key":"e_1_2_1_40_1","volume-title":"Java Native Interface: Programmer\u2019s Guide and Specification","author":"Liang Sheng"},{"key":"e_1_2_1_41_1","unstructured":"Lookout. 2010. Introducing the app genome project. http:\/\/blog.mylookout.com\/2010\/07\/introducing-the-app-genome-project\/.  Lookout. 2010. Introducing the app genome project. http:\/\/blog.mylookout.com\/2010\/07\/introducing-the-app-genome-project\/."},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1379022.1375606"},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of the USENIX Annual Technical Conference.","author":"Migliavacca Matteo","year":"2010"},{"key":"e_1_2_1_44_1","unstructured":"Dan Moren. 2009. Retrievable iphone numbers mean potential privacy issues. http:\/\/www.macworld.com\/article\/143047\/2009\/09\/phone_hole.html.  Dan Moren. 2009. Retrievable iphone numbers mean potential privacy issues. http:\/\/www.macworld.com\/article\/143047\/2009\/09\/phone_hole.html."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292561"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/363516.363526"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516677"},{"key":"e_1_2_1_48_1","volume-title":"Proceedings of the 1st International Workshop on Run Time Enforcement for Mobile and Distributed Systems (REM\u201907)","author":"Nair Srijith K."},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755732"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1554339.1554349"},{"key":"e_1_2_1_51_1","volume-title":"Proceedings of the 12th Network and Distributed System Security Symposium (NDSS\u201905)","author":"Newsome James","year":"2005"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.39"},{"key":"e_1_2_1_53_1","unstructured":"Pendragon Software Corporation. 1997. CaffeineMark 3.0. http:\/\/www.benchmarkhq.ru\/cm30\/.  Pendragon Software Corporation. 1997. CaffeineMark 3.0. http:\/\/www.benchmarkhq.ru\/cm30\/."},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2006.29"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542484"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2002.806121"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/1356058.1356069"},{"key":"e_1_2_1_58_1","volume-title":"Proceedings of the ISOC Network and Distributed System Security Symposium (NDSS\u201911)","author":"Schlegel Roman","year":"2011"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519073"},{"key":"e_1_2_1_61_1","volume-title":"Proceedings of the ISOC Network and Distributed System Security Symposium (NDSS\u201913)","author":"Smalley Stephen","year":"2013"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_2_1_63_1","volume-title":"Proceedings of the USENIX Symposium on Operating Systems Design and Implementation (OSDI\u201912)","author":"Tang Yang","year":"2012"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.31"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314299.1314302"},{"key":"e_1_2_1_66_1","volume-title":"Proceedings of the 14th Network and Distributed System Security Symposium.","author":"Vogt Philipp","year":"2007"},{"key":"e_1_2_1_67_1","volume-title":"Proceedings of 15th Network and Distributed System Security Symposium (NDSS\u201908)","author":"Wang Xiao Feng","year":"2008"},{"key":"e_1_2_1_68_1","unstructured":"Whatapp. 2010. WhatApp. http:\/\/www.whatapp.org.  Whatapp. 2010. WhatApp. http:\/\/www.whatapp.org."},{"key":"e_1_2_1_69_1","volume-title":"Proceedings of the USENIX Security Symposium.","author":"Xu Rubin","year":"2012"},{"key":"e_1_2_1_70_1","volume-title":"Proceedings of the USENIX Security Symposium. 121--136","author":"Xu Wei"},{"key":"e_1_2_1_71_1","volume-title":"Proceedings of the USENIX Security Symposium.","author":"Yan Lok Kwong","year":"2012"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629604"},{"key":"e_1_2_1_74_1","volume-title":"Proceedings of the 4th USENIX Symposium on Network Systems Design and Implementation (NSDI\u201907)","author":"Yumerefendi Aydan R."},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.5555\/1298455.1298481"},{"key":"e_1_2_1_76_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium.","author":"Zhou Yajin","year":"2012"},{"key":"e_1_2_1_77_1","volume-title":"Proceedings of the International Conference on Trust and Trustworthy Computing (TRUST\u201911)","author":"Zhou Yajin"},{"key":"e_1_2_1_78_1","unstructured":"David Zhu Jaeyeon Jung Dawn Song Tadayoshi Kohno and David Wetherall. 2009. Privacy scope: A precise information flow tracking system for finding application leaks. Tech. rep. EECS-2009-145 Department of Computer Science UC Berkeley CA.  David Zhu Jaeyeon Jung Dawn Song Tadayoshi Kohno and David Wetherall. 2009. Privacy scope: A precise information flow tracking system for finding application leaks. Tech. rep. EECS-2009-145 Department of Computer Science UC Berkeley CA."}],"container-title":["ACM Transactions on Computer Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2619091","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2619091","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:55:47Z","timestamp":1750229747000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2619091"}},"subtitle":["An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones"],"short-title":[],"issued":{"date-parts":[[2014,6]]},"references-count":78,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2014,6]]}},"alternative-id":["10.1145\/2619091"],"URL":"https:\/\/doi.org\/10.1145\/2619091","relation":{},"ISSN":["0734-2071","1557-7333"],"issn-type":[{"value":"0734-2071","type":"print"},{"value":"1557-7333","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,6]]},"assertion":[{"value":"2013-04-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2014-04-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2014-06-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}