{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:58:06Z","timestamp":1781283486881,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T00:00:00Z","timestamp":1587340800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,4,20]]},"DOI":"10.1145\/3366423.3380078","type":"proceedings-article","created":{"date-parts":[[2020,5,4]],"date-time":"2020-05-04T08:16:51Z","timestamp":1588580211000},"page":"3063-3069","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["An Empirical Study of Android Security Bulletins in Different Vendors"],"prefix":"10.1145","author":[{"given":"Sadegh","family":"Farhang","sequence":"first","affiliation":[{"name":"Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mehmet Bahadir","family":"Kirdan","sequence":"additional","affiliation":[{"name":"Technical University of Munich"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aron","family":"Laszka","sequence":"additional","affiliation":[{"name":"University of Houston"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jens","family":"Grossklags","sequence":"additional","affiliation":[{"name":"Technical University of Munich"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,4,20]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the 25th USENIX Security Symposium (USENIX Security). 1153\u20131168","author":"Aafer Yousra","year":"2016","unstructured":"Yousra Aafer , Xiao Zhang , and Wenliang Du . 2016 . Harvesting inconsistent security configurations in custom Android roms via differential analysis . In Proceedings of the 25th USENIX Security Symposium (USENIX Security). 1153\u20131168 . Yousra Aafer, Xiao Zhang, and Wenliang Du. 2016. Harvesting inconsistent security configurations in custom Android roms via differential analysis. In Proceedings of the 25th USENIX Security Symposium (USENIX Security). 1153\u20131168."},{"key":"e_1_3_2_1_2_1","unstructured":"AOSP. [n. d.]. Android Security Bulletin. https:\/\/source.android.com\/security\/bulletin. Accessed: 10\/13\/2019.  AOSP. [n. d.]. Android Security Bulletin. https:\/\/source.android.com\/security\/bulletin. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_3_1","unstructured":"AOSP. 2015. Android Security Bulletin 2015-08. https:\/\/source.android.com\/security\/bulletin\/2015-08-01. Accessed: 01\/30\/2019.  AOSP. 2015. Android Security Bulletin 2015-08. https:\/\/source.android.com\/security\/bulletin\/2015-08-01. Accessed: 01\/30\/2019."},{"key":"e_1_3_2_1_4_1","unstructured":"AOSP. 2015. Android Security Bulletin 2015-12. https:\/\/source.android.com\/security\/bulletin\/2015-12-01. Accessed: 01\/26\/2019.  AOSP. 2015. Android Security Bulletin 2015-12. https:\/\/source.android.com\/security\/bulletin\/2015-12-01. Accessed: 01\/26\/2019."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0226"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1718918.1718973"},{"key":"e_1_3_2_1_7_1","volume-title":"Federal\u00a0Trade Commission","author":"S.","year":"2016","unstructured":"U. S. Federal\u00a0Trade Commission . 2016 . FTC to study mobile device industry\u2019s security update practices. https:\/\/www.ftc.gov\/news-events\/press-releases\/2016\/05\/ftc-study-mobile-device-industrys-security-update-practices. Accessed: 02\/02\/2020. U.S. Federal\u00a0Trade Commission. 2016. FTC to study mobile device industry\u2019s security update practices. https:\/\/www.ftc.gov\/news-events\/press-releases\/2016\/05\/ftc-study-mobile-device-industrys-security-update-practices. Accessed: 02\/02\/2020."},{"key":"e_1_3_2_1_8_1","volume-title":"Federal\u00a0Trade Commission","author":"S.","year":"2018","unstructured":"U. S. Federal\u00a0Trade Commission 2018 . Mobile security updates: Understanding the issues. https:\/\/www.ftc.gov\/system\/files\/documents\/reports\/mobile-security-updates-understanding-issues\/mobile_security_updates_understanding_the_issues_publication_final.pdf. Accessed : 02\/02\/2020. U.S. Federal\u00a0Trade Commission 2018. Mobile security updates: Understanding the issues. https:\/\/www.ftc.gov\/system\/files\/documents\/reports\/mobile-security-updates-understanding-issues\/mobile_security_updates_understanding_the_issues_publication_final.pdf. Accessed: 02\/02\/2020."},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security). 869\u2013885","author":"Dong Ying","year":"2019","unstructured":"Ying Dong , Wenbo Guo , Yueqi Chen , Xinyu Xing , Yuqing Zhang , and Gang Wang . 2019 . Towards the detection of inconsistencies in public security vulnerability reports . In Proceedings of the 28th USENIX Security Symposium (USENIX Security). 869\u2013885 . Ying Dong, Wenbo Guo, Yueqi Chen, Xinyu Xing, Yuqing Zhang, and Gang Wang. 2019. Towards the detection of inconsistencies in public security vulnerability reports. In Proceedings of the 28th USENIX Security Symposium (USENIX Security). 869\u2013885."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1600176.1600182"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.26"},{"key":"e_1_3_2_1_12_1","unstructured":"Sadegh Farhang Mehmet\u00a0Bahadir Kirdan Aron Laszka and Jens Grossklags. 2019. Hey Google What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities. arXiv preprint arXiv:1905.09352(2019).  Sadegh Farhang Mehmet\u00a0Bahadir Kirdan Aron Laszka and Jens Grossklags. 2019. Hey Google What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities. arXiv preprint arXiv:1905.09352(2019)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-58387-6_7"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274733"},{"key":"e_1_3_2_1_15_1","unstructured":"Google. [n. d.]. AOSP Git. https:\/\/android.googlesource.com\/. Accessed: 10\/5\/2019.  Google. [n. d.]. AOSP Git. https:\/\/android.googlesource.com\/. Accessed: 10\/5\/2019."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806799.1806871"},{"key":"e_1_3_2_1_17_1","unstructured":"Huawei. [n. d.]. Android Security Bulletin. https:\/\/consumer.huawei.com\/en\/support\/bulletin\/. Accessed: 10\/13\/2019.  Huawei. [n. d.]. Android Security Bulletin. https:\/\/consumer.huawei.com\/en\/support\/bulletin\/. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_18_1","unstructured":"Huawei. [n. d.]. EMUI\/Magic UI. https:\/\/consumer.huawei.com\/en\/support\/bulletin\/. Accessed: 10\/5\/2019.  Huawei. [n. d.]. EMUI\/Magic UI. https:\/\/consumer.huawei.com\/en\/support\/bulletin\/. Accessed: 10\/5\/2019."},{"key":"e_1_3_2_1_19_1","unstructured":"Huawei. [n. d.]. Security Advisories. https:\/\/www.huawei.com\/en\/psirt\/all-bulletins. Accessed: 10\/5\/2019.  Huawei. [n. d.]. Security Advisories. https:\/\/www.huawei.com\/en\/psirt\/all-bulletins. Accessed: 10\/5\/2019."},{"key":"e_1_3_2_1_20_1","unstructured":"IDC. [n. d.]. Android Market Share. https:\/\/www.idc.com\/promo\/smartphone-market-share\/os. Accessed: 10\/13\/2019.  IDC. [n. d.]. Android Market Share. https:\/\/www.idc.com\/promo\/smartphone-market-share\/os. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_21_1","unstructured":"LG. [n. d.]. Android Security Bulletin. https:\/\/lgsecurity.lge.com\/security_updates_mobile.html. Accessed: 10\/13\/2019.  LG. [n. d.]. Android Security Bulletin. https:\/\/lgsecurity.lge.com\/security_updates_mobile.html. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134072"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.60"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS).","author":"Mathur Arunesh","year":"2017","unstructured":"Arunesh Mathur and Marshini Chetty . 2017 . Impact of user characteristics on attitudes towards automatic mobile application updates . In Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS). Arunesh Mathur and Marshini Chetty. 2017. Impact of user characteristics on attitudes towards automatic mobile application updates. In Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS)."},{"key":"e_1_3_2_1_25_1","unstructured":"MongoDB. [n. d.]. What is MongoDB?https:\/\/www.mongodb.com\/what-is-mongodb. Accessed: 01\/23\/2019.  MongoDB. [n. d.]. What is MongoDB?https:\/\/www.mongodb.com\/what-is-mongodb. Accessed: 01\/23\/2019."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 27th USENIX Security Symposium (USENIX Security). 919\u2013936","author":"Mu Dongliang","year":"2018","unstructured":"Dongliang Mu , Alejandro Cuevas , Limin Yang , Hang Hu , Xinyu Xing , Bing Mao , and Gang Wang . 2018 . Understanding the reproducibility of crowd-reported security vulnerabilities . In Proceedings of the 27th USENIX Security Symposium (USENIX Security). 919\u2013936 . Dongliang Mu, Alejandro Cuevas, Limin Yang, Hang Hu, Xinyu Xing, Bing Mao, and Gang Wang. 2018. Understanding the reproducibility of crowd-reported security vulnerabilities. In Proceedings of the 27th USENIX Security Symposium (USENIX Security). 919\u2013936."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.48"},{"key":"e_1_3_2_1_28_1","unstructured":"Serkan \u00d6zkan. [n. d.]. CVE Details. https:\/\/www.cvedetails.com. Accessed: 01\/23\/2019.  Serkan \u00d6zkan. [n. d.]. CVE Details. https:\/\/www.cvedetails.com. Accessed: 01\/23\/2019."},{"key":"e_1_3_2_1_29_1","unstructured":"Samsung. [n. d.]. Android Security Bulletin. https:\/\/security.samsungmobile.com\/securityUpdate.smsb. Accessed: 10\/13\/2019.  Samsung. [n. d.]. Android Security Bulletin. https:\/\/security.samsungmobile.com\/securityUpdate.smsb. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_30_1","unstructured":"Selenium Project. [n. d.]. Selenium. https:\/\/www.seleniumhq.org. Accessed: 01\/23\/2019.  Selenium Project. [n. d.]. Selenium. https:\/\/www.seleniumhq.org. Accessed: 01\/23\/2019."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.144"},{"key":"e_1_3_2_1_32_1","unstructured":"statcounter. 2019. Mobile Device Market Share. https:\/\/gs.statcounter.com\/vendor-market-share\/mobile\/worldwide\/2019. Accessed: 10\/13\/2019.  statcounter. 2019. Mobile Device Market Share. https:\/\/gs.statcounter.com\/vendor-market-share\/mobile\/worldwide\/2019. Accessed: 10\/13\/2019."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2808117.2808118"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 5th USENIX Workshop on Offensive Technologies (WOOT). 81\u201390","author":"Vidas Timothy","year":"2011","unstructured":"Timothy Vidas , Daniel Votipka , and Nicolas Christin . 2011 . All your droid are belong to us: A survey of current Android attacks . In Proceedings of the 5th USENIX Workshop on Offensive Technologies (WOOT). 81\u201390 . Timothy Vidas, Daniel Votipka, and Nicolas Christin. 2011. All your droid are belong to us: A survey of current Android attacks. In Proceedings of the 5th USENIX Workshop on Offensive Technologies (WOOT). 81\u201390."},{"key":"e_1_3_2_1_35_1","unstructured":"Wikipedia. [n. d.]. JSON. https:\/\/en.wikipedia.org\/wiki\/JSON. Accessed: 01\/23\/2019.  Wikipedia. [n. d.]. JSON. https:\/\/en.wikipedia.org\/wiki\/JSON. Accessed: 01\/23\/2019."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516728"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.32"}],"event":{"name":"WWW '20: The Web Conference 2020","location":"Taipei Taiwan","acronym":"WWW '20","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of The Web Conference 2020"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3366423.3380078","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3366423.3380078","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:33:17Z","timestamp":1750199597000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3366423.3380078"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,20]]},"references-count":37,"alternative-id":["10.1145\/3366423.3380078","10.1145\/3366423"],"URL":"https:\/\/doi.org\/10.1145\/3366423.3380078","relation":{},"subject":[],"published":{"date-parts":[[2020,4,20]]},"assertion":[{"value":"2020-04-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}