{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:11:31Z","timestamp":1750306291756,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,5,14]],"date-time":"2016-05-14T00:00:00Z","timestamp":1463184000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,5,14]]},"DOI":"10.1145\/2884781.2884863","type":"proceedings-article","created":{"date-parts":[[2016,5,13]],"date-time":"2016-05-13T18:21:10Z","timestamp":1463163670000},"page":"959-970","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Reference hijacking"],"prefix":"10.1145","author":[{"given":"Wei","family":"You","sequence":"first","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Liang","sequence":"additional","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenchang","family":"Shi","sequence":"additional","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuyang","family":"Zhu","sequence":"additional","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Wang","sequence":"additional","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sikefu","family":"Xie","sequence":"additional","affiliation":[{"name":"Renmin University of China, MOE, Beijing, China and Renmin University of China, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Purdue University, Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2016,5,14]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Android Malware Genome Project. http:\/\/www.malgenomeproject.org.  Android Malware Genome Project. http:\/\/www.malgenomeproject.org."},{"key":"e_1_3_2_1_2_1","unstructured":"Android Source Code Tree. https:\/\/android.googlesource.com.  Android Source Code Tree. https:\/\/android.googlesource.com."},{"key":"e_1_3_2_1_3_1","unstructured":"Apktool. http:\/\/ibotpeaches.github.io\/Apktool.  Apktool. http:\/\/ibotpeaches.github.io\/Apktool."},{"key":"e_1_3_2_1_4_1","unstructured":"CaffeineMark. http:\/\/www.benchmarkhq.ru\/cm30.  CaffeineMark. http:\/\/www.benchmarkhq.ru\/cm30."},{"key":"e_1_3_2_1_5_1","unstructured":"CVE. https:\/\/cve.mitre.org.  CVE. https:\/\/cve.mitre.org."},{"key":"e_1_3_2_1_6_1","unstructured":"LinkedIn. https:\/\/play.google.com\/store\/apps\/details?id=com.linkedin.android.  LinkedIn. https:\/\/play.google.com\/store\/apps\/details?id=com.linkedin.android."},{"key":"e_1_3_2_1_7_1","unstructured":"OpentIntent. https:\/\/code.google.com\/p\/openintents\/downloads\/list.  OpentIntent. https:\/\/code.google.com\/p\/openintents\/downloads\/list."},{"key":"e_1_3_2_1_8_1","unstructured":"OSVDB. http:\/\/osvdb.org.  OSVDB. http:\/\/osvdb.org."},{"key":"e_1_3_2_1_9_1","unstructured":"Patch for FakeID. https:\/\/android.googlesource.com\/platform\/libcore\/+\/android-cts-4.1_r4.  Patch for FakeID. https:\/\/android.googlesource.com\/platform\/libcore\/+\/android-cts-4.1_r4."},{"key":"e_1_3_2_1_10_1","unstructured":"Patch for Heartbleed. http:\/\/git.openssl.org\/gitweb\/?p=openssl.git;a=commitdiff;h=96db902.  Patch for Heartbleed. http:\/\/git.openssl.org\/gitweb\/?p=openssl.git;a=commitdiff;h=96db902."},{"key":"e_1_3_2_1_11_1","unstructured":"PoC for FakeID. https:\/\/github.com\/retme7\/FakeID_poc_by_retme_bug_13678484.  PoC for FakeID. https:\/\/github.com\/retme7\/FakeID_poc_by_retme_bug_13678484."},{"key":"e_1_3_2_1_12_1","unstructured":"PoC for Heartbleed. https:\/\/github.com\/Lekensteyn\/pacemaker.  PoC for Heartbleed. https:\/\/github.com\/Lekensteyn\/pacemaker."},{"key":"e_1_3_2_1_13_1","unstructured":"Proportion of devices running vulnerable versions of Android. http:\/\/androidvulnerabilities.org\/graph.  Proportion of devices running vulnerable versions of Android. http:\/\/androidvulnerabilities.org\/graph."},{"key":"e_1_3_2_1_14_1","unstructured":"Smali and BakSmali. https:\/\/github.com\/JesusFreke\/smali.  Smali and BakSmali. https:\/\/github.com\/JesusFreke\/smali."},{"key":"e_1_3_2_1_15_1","unstructured":"Xposed Framework. http:\/\/repo.xposed.info.  Xposed Framework. http:\/\/repo.xposed.info."},{"key":"e_1_3_2_1_16_1","unstructured":"Bluebox. Android Fake ID Vulnerability Lets Malware Impersonate Trusted Applications. https:\/\/bluebox.com\/technical\/android-fake-id-vulnerability.  Bluebox. Android Fake ID Vulnerability Lets Malware Impersonate Trusted Applications. https:\/\/bluebox.com\/technical\/android-fake-id-vulnerability."},{"key":"e_1_3_2_1_17_1","unstructured":"CNET. M is for Marshmallow: Google names its next Android update. http:\/\/www.cnet.com\/news\/m-is-for-marshmallow-google-announces-name-of-android-update.  CNET. M is for Marshmallow: Google names its next Android update. http:\/\/www.cnet.com\/news\/m-is-for-marshmallow-google-announces-name-of-android-update."},{"key":"e_1_3_2_1_18_1","unstructured":"ExtremeTech. Google Throws Nearly a Billion Android Users Under the Bus Refuses to Patch OS Vulnerability. http:\/\/www.extremetech.com\/mobile\/197346-google-throws-nearly-a-billion-android-users-under-the-bus-refuses-to-patch-os-vulnerability.  ExtremeTech. Google Throws Nearly a Billion Android Users Under the Bus Refuses to Patch OS Vulnerability. http:\/\/www.extremetech.com\/mobile\/197346-google-throws-nearly-a-billion-android-users-under-the-bus-refuses-to-patch-os-vulnerability."},{"key":"e_1_3_2_1_19_1","unstructured":"Forbes. Report: 97% Of Mobile Malware Is On Android. http:\/\/www.forbes.com\/sites\/gordonkelly\/2014\/03\/24\/report-97-of-mobile-malware-is-on-android-this-is-the-easy-way-you-stay-safe.  Forbes. Report: 97% Of Mobile Malware Is On Android. http:\/\/www.forbes.com\/sites\/gordonkelly\/2014\/03\/24\/report-97-of-mobile-malware-is-on-android-this-is-the-easy-way-you-stay-safe."},{"key":"e_1_3_2_1_20_1","unstructured":"Inquirer. Outdated Android Devices Are Exposing 400 Million Users to Security Threats. http:\/\/www.theinquirer.net\/inquirer\/feature\/2235734\/outdated-android-devices-are-exposing-400-million-users-to-security-threats.  Inquirer. Outdated Android Devices Are Exposing 400 Million Users to Security Threats. http:\/\/www.theinquirer.net\/inquirer\/feature\/2235734\/outdated-android-devices-are-exposing-400-million-users-to-security-threats."},{"key":"e_1_3_2_1_21_1","volume-title":"Smartphone OS Market Share","author":"International Data Corporation","year":"2015","unstructured":"International Data Corporation . Smartphone OS Market Share , 2015 Q2. http:\/\/www.idc.com\/prodserv\/smartphone-os-market-share.jsp. International Data Corporation. Smartphone OS Market Share, 2015 Q2. http:\/\/www.idc.com\/prodserv\/smartphone-os-market-share.jsp."},{"key":"e_1_3_2_1_22_1","unstructured":"ISPRAS. Static ARM Binary Code Instrumentation. http:\/\/www.ispras.ru\/en\/technologies\/static_arm_binary_code_instrumentation\/.  ISPRAS. Static ARM Binary Code Instrumentation. http:\/\/www.ispras.ru\/en\/technologies\/static_arm_binary_code_instrumentation\/."},{"key":"e_1_3_2_1_23_1","unstructured":"Neowin. HTC Officially Stops One S Updates Barely a Year after Launch. http:\/\/www.neowin.net\/news\/htc-officially-stops-one-s-updates-barely-a-year-after-launch.  Neowin. HTC Officially Stops One S Updates Barely a Year after Launch. http:\/\/www.neowin.net\/news\/htc-officially-stops-one-s-updates-barely-a-year-after-launch."},{"key":"e_1_3_2_1_24_1","unstructured":"OpenSSL. The Heartbleed Bug. http:\/\/heartbleed.com.  OpenSSL. The Heartbleed Bug. http:\/\/heartbleed.com."},{"key":"e_1_3_2_1_25_1","unstructured":"TechTarget. Rooted Android Device Risks Include Network Access Data Theft. http:\/\/searchmobilecomputing.techtarget.com\/tip\/Rooted-Android-device-risks-include-network-access-data-theft.  TechTarget. Rooted Android Device Risks Include Network Access Data Theft. http:\/\/searchmobilecomputing.techtarget.com\/tip\/Rooted-Android-device-risks-include-network-access-data-theft."},{"key":"e_1_3_2_1_26_1","unstructured":"Wikipedia. Android Version History. https:\/\/en.wikipedia.org\/wiki\/Android_version_history.  Wikipedia. Android Version History. https:\/\/en.wikipedia.org\/wiki\/Android_version_history."},{"key":"e_1_3_2_1_27_1","unstructured":"Xda-Developers. List of Devices Able to Run Xposed on Lollipop. http:\/\/forum.xda-developers.com\/xposed\/list-devices-able-to-run-xposed-lollipop-t3030993.  Xda-Developers. List of Devices Able to Run Xposed on Lollipop. http:\/\/forum.xda-developers.com\/xposed\/list-devices-able-to-run-xposed-lollipop-t3030993."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2642955"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 24th USENIX Security Symposium. Security'","author":"Backes M.","year":"2015","unstructured":"M. Backes , S. Bugiel , C. Hammer , O. Schranz , and P. S. Rekowsky . Boxify: Full-Fledged App Sandboxing for Stock Android . In Proceedings of the 24th USENIX Security Symposium. Security' 2015 . M. Backes, S. Bugiel, C. Hammer, O. Schranz, and P. S. Rekowsky. Boxify: Full-Fledged App Sandboxing for Stock Android. In Proceedings of the 24th USENIX Security Symposium. Security' 2015."},{"key":"e_1_3_2_1_31_1","volume-title":"Fast and Portable Dynamic Translator. In Proceedings of the USENIX Annual Technical Conference. ATC'","author":"Bellard F.","year":"2005","unstructured":"F. Bellard . Qemu, a Fast and Portable Dynamic Translator. In Proceedings of the USENIX Annual Technical Conference. ATC' 2005 . USENIX Association, 41--46. F. Bellard. Qemu, a Fast and Portable Dynamic Translator. In Proceedings of the USENIX Annual Technical Conference. ATC' 2005. USENIX Association, 41--46."},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 22th USENIX Security Symposium. Security'","author":"Bugiel S.","year":"2013","unstructured":"S. Bugiel , S Heuser , and A. R. Sadeghi . Flexible and Fine-Grained Mandatory Access Control on Android for Diverse Security and Privacy Policies . In Proceedings of the 22th USENIX Security Symposium. Security' 2013 . USENIX Association, 131--146. S. Bugiel, S Heuser, and A. R. Sadeghi. Flexible and Fine-Grained Mandatory Access Control on Android for Diverse Security and Privacy Policies. In Proceedings of the 22th USENIX Security Symposium. Security' 2013. USENIX Association, 131--146."},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 24st USENIX Conference on Security Symposium. Security'","author":"Chen K.","year":"2015","unstructured":"K. Chen , P. Wang , Y. Lee , X. Wang , N. Zhang , H. Huang , W. Zou , and P. Liu . Finding Unknown Malice in 10 Seconds: Mass Vetting for New Threats at the Google-Play Scale . In Proceedings of the 24st USENIX Conference on Security Symposium. Security' 2015 , USENIX Association, 659--674. K. Chen, P. Wang, Y. Lee, X. Wang, N. Zhang, H. Huang, W. Zou, and P. Liu. Finding Unknown Malice in 10 Seconds: Mass Vetting for New Threats at the Google-Play Scale. In Proceedings of the 24st USENIX Conference on Security Symposium. Security' 2015, USENIX Association, 659--674."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1999995.2000018"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314466.1314470"},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 20th USENIX Security Symposium. Security'","author":"Dietz M.","year":"2011","unstructured":"M. Dietz , S. Shekhar , Y. Pisetsky , A. Shu , and D. S. Wallach . QUIRE: Lightweight Provenance for Smart Phone Operating Systems . In Proceedings of the 20th USENIX Security Symposium. Security' 2011 . M. Dietz, S. Shekhar, Y. Pisetsky, A. Shu, and D. S. Wallach. QUIRE: Lightweight Provenance for Smart Phone Operating Systems. In Proceedings of the 20th USENIX Security Symposium. Security' 2011."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation. OSDI'","author":"Enck W.","year":"2010","unstructured":"W. Enck , P. Gilbert , B. G. Chun , L. P. Cox , J. Jung , P. McDaniel , and A. Sheth . TaintDroid: an Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones . In Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation. OSDI' 2010 . USENIX Association, 393--407. W. Enck, P. Gilbert, B. G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. Sheth. TaintDroid: an Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. In Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation. OSDI' 2010. USENIX Association, 393--407."},{"key":"e_1_3_2_1_39_1","unstructured":"\u00da. Erlingsson.\n  The Inlined Reference Monitor Approach to Security Policy Enforcement\n  . PhD Dissertation Cornell University\n  . \n  2004\n  . http:\/\/www.ru.is\/starfsfolk\/ulfar\/thesis.pdf.   \u00da. Erlingsson. The Inlined Reference Monitor Approach to Security Policy Enforcement. PhD Dissertation Cornell University . 2004. http:\/\/www.ru.is\/starfsfolk\/ulfar\/thesis.pdf."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046780"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2381934.2381938"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523679"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.39"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/VTCSpring.2015.7145666"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2015.7249466"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.48"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590325"},{"key":"e_1_3_2_1_51_1","volume-title":"Proceedings of the 21st USENIX Conference on Security Symposium. Security'","author":"Xu R.","year":"2012","unstructured":"R. Xu , H. Sa\u00efdi , and R. Anderson . Aurasium: Practical Policy Enforcement for Android Applications . In Proceedings of the 21st USENIX Conference on Security Symposium. Security' 2012 , USENIX Association, 539--552. R. Xu, H. Sa\u00efdi, and R. Anderson. Aurasium: Practical Policy Enforcement for Android Applications. In Proceedings of the 21st USENIX Conference on Security Symposium. Security' 2012, USENIX Association, 539--552."},{"key":"e_1_3_2_1_52_1","volume-title":"Proceedings of the 21st USENIX Conference on Security Symposium. Security'","author":"Yan L. K.","year":"2012","unstructured":"L. K. Yan and H. Yin . DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis . In Proceedings of the 21st USENIX Conference on Security Symposium. Security' 2012 . USENIX Association, 569--584. L. K. Yan and H. Yin. DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis. In Proceedings of the 21st USENIX Conference on Security Symposium. Security' 2012. USENIX Association, 569--584."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23255"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.5555\/2022245.2022255"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"}],"event":{"name":"ICSE '16: 38th International Conference on Software Engineering","sponsor":["ACM Association for Computing Machinery","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE-CS\\TCSE TC on Software Engineering","IEEE-CS\\DATC IEEE Computer Society"],"location":"Austin Texas","acronym":"ICSE '16"},"container-title":["Proceedings of the 38th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2884781.2884863","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2884781.2884863","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:39:06Z","timestamp":1750221546000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2884781.2884863"}},"subtitle":["patching, protecting and analyzing on unmodified and non-rooted android devices"],"short-title":[],"issued":{"date-parts":[[2016,5,14]]},"references-count":53,"alternative-id":["10.1145\/2884781.2884863","10.1145\/2884781"],"URL":"https:\/\/doi.org\/10.1145\/2884781.2884863","relation":{},"subject":[],"published":{"date-parts":[[2016,5,14]]},"assertion":[{"value":"2016-05-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}