{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T20:59:35Z","timestamp":1760043575979,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":60,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T00:00:00Z","timestamp":1638748800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,12,6]]},"DOI":"10.1145\/3485832.3485888","type":"proceedings-article","created":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T13:42:32Z","timestamp":1638798152000},"page":"944-956","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Characterizing Improper Input Validation Vulnerabilities of Mobile Crowdsourcing Services"],"prefix":"10.1145","author":[{"given":"Sojhal Ismail","family":"Khan","sequence":"first","affiliation":[{"name":"University of Southern California, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dominika C","family":"Woszczyk","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chengzeng","family":"You","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Soteris","family":"Demetriou","sequence":"additional","affiliation":[{"name":"Imperial College London"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Muhammad","family":"Naveed","sequence":"additional","affiliation":[{"name":"University of Southern California"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,12,6]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2000. Gas Buddy. https:\/\/www.gasbuddy.com."},{"key":"e_1_3_2_1_2_1","unstructured":"2000. OpenCV. https:\/\/opencv.org\/."},{"key":"e_1_3_2_1_3_1","unstructured":"2007. Map My Run. https:\/\/www.mapmyrun.com\/."},{"key":"e_1_3_2_1_4_1","unstructured":"2008. Google Maps. https:\/\/www.google.com\/maps."},{"key":"e_1_3_2_1_5_1","unstructured":"2008. UI Automator. https:\/\/developer.android.com\/training\/testing\/ui-automator.html."},{"key":"e_1_3_2_1_6_1","unstructured":"2009. Fitbit. https:\/\/www.fitbit.com."},{"key":"e_1_3_2_1_7_1","unstructured":"2009. Strava. https:\/\/www.strava.com\/."},{"key":"e_1_3_2_1_8_1","unstructured":"2009. Strava Labs. https:\/\/labs.strava.com\/."},{"key":"e_1_3_2_1_9_1","unstructured":"2011. Genymotion Android Emulator. https:\/\/www.genymotion.com\/."},{"key":"e_1_3_2_1_10_1","unstructured":"2012. Transit. https:\/\/transitapp.com\/."},{"key":"e_1_3_2_1_11_1","unstructured":"2015. ToiFi. https:\/\/play.google.com\/store\/apps\/details?id=com.apprevelations.indiantoiletfinder."},{"key":"e_1_3_2_1_12_1","unstructured":"2016. Apktool. https:\/\/ibotpeaches.github.io\/Apktool\/."},{"key":"e_1_3_2_1_13_1","unstructured":"2016. Basket. http:\/\/basket.com\/."},{"key":"e_1_3_2_1_14_1","unstructured":"2017. Appium. http:\/\/appium.io\/."},{"key":"e_1_3_2_1_15_1","unstructured":"2017. Frida. https:\/\/frida.re\/."},{"key":"e_1_3_2_1_16_1","unstructured":"2018. Neighbors App by Ring. https:\/\/store.ring.com\/neighbors."},{"key":"e_1_3_2_1_17_1","unstructured":"2018. Police Detector (Speed Camera Radar). https:\/\/play.google.com\/store\/apps\/details?id=tat.example.ildar.seer&hl=en_GB."},{"key":"e_1_3_2_1_18_1","unstructured":"2019. Google Images Download \u2014 Google Images Download documentation. https:\/\/google-images-download.readthedocs.io\/en\/latest\/index.html."},{"key":"e_1_3_2_1_19_1","unstructured":"2019. minimaxir\/gpt-2-simple. https:\/\/github.com\/minimaxir\/gpt-2-simple."},{"key":"e_1_3_2_1_20_1","unstructured":"2020. Google Cloud Natural Language. https:\/\/cloud.google.com\/natural-language\/."},{"key":"e_1_3_2_1_21_1","unstructured":"2020. You VS the Year 2020 | MapMyFitness. https:\/\/www.mapmyrun.com\/challenges\/yvsty2020\/register."},{"key":"e_1_3_2_1_22_1","unstructured":"2021. Project Website.https:\/\/sites.google.com\/view\/data-poisoning-mcs."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44041-1_114"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 9th Workshop on Systems Testing and Validation (STV\u201912)","author":"Bozic Josip","year":"2012","unstructured":"Josip Bozic and Franz Wotawa. 2012. Model-based testing-from safety to security. In Proceedings of the 9th Workshop on Systems Testing and Validation (STV\u201912). 9\u201316."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2012.6502516"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"Jiongyi Chen Wenrui Diao Qingchuan Zhao Chaoshun Zuo Zhiqiang Lin XiaoFeng Wang Wing\u00a0Cheong Lau Menghan Sun Ronghai Yang and Kehuan Zhang. 2018. IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing.. In NDSS.","DOI":"10.14722\/ndss.2018.23159"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098251"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"e_1_3_2_1_29_1","volume-title":"Gltr: Statistical detection and visualization of generated text. arXiv preprint arXiv:1906.04043(2019).","author":"Gehrmann Sebastian","year":"2019","unstructured":"Sebastian Gehrmann, Hendrik Strobelt, and Alexander\u00a0M Rush. 2019. Gltr: Statistical detection and visualization of generated text. arXiv preprint arXiv:1906.04043(2019)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1734583.1734592"},{"volume-title":"United Kingdom milk prices and composition of milk statistics notice (data for","year":"2020","key":"e_1_3_2_1_32_1","unstructured":"gov.uk. 2020. United Kingdom milk prices and composition of milk statistics notice (data for April 2020). https:\/\/www.gov.uk\/government\/publications\/uk-milk-prices-and-composition-of-milk\/united-kingdom-milk-prices-and-composition-of-milk-statistics-notice-data-for-june-2019."},{"key":"e_1_3_2_1_33_1","volume-title":"TextExerciser: Feedback-driven Text Input Exercising for Android Applications. In 2020 IEEE Symposium on Security and Privacy. IEEE.","author":"He Yuyu","year":"2020","unstructured":"Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, 2020. TextExerciser: Feedback-driven Text Input Exercising for Android Applications. In 2020 IEEE Symposium on Security and Privacy. IEEE."},{"volume-title":"24th {USENIX} Security Symposium ({USENIX} Security 15). 977\u2013992.","author":"Huang Jianjun","key":"e_1_3_2_1_34_1","unstructured":"Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, and Guofei Jiang. 2015. {SUPOR}: Precise and Scalable Sensitive User Input Detection for Android Apps. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 977\u2013992."},{"volume-title":"2014 IEEE 11th Consumer Communications and Networking Conference (CCNC). 86\u201391","author":"Hubbard J.","key":"e_1_3_2_1_35_1","unstructured":"J. Hubbard, K. Weimer, and Y. Chen. 2014. A study of SSL Proxy attacks on Android and iOS mobile applications. In 2014 IEEE 11th Consumer Communications and Networking Conference (CCNC). 86\u201391."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_7"},{"key":"e_1_3_2_1_37_1","unstructured":"Hongwei Li and Bin Yu. 2014. Error rate bounds and iterative weighted majority voting for crowdsourcing. arXiv preprint arXiv:1411.4086(2014)."},{"key":"e_1_3_2_1_38_1","volume-title":"Smartphone GPS accuracy study in an urban environment. PloS one 14, 7","author":"Merry Krista","year":"2019","unstructured":"Krista Merry and Pete Bettinger. 2019. Smartphone GPS accuracy study in an urban environment. PloS one 14, 7 (2019)."},{"key":"e_1_3_2_1_39_1","volume-title":"Uipicker: User-input privacy identification in mobile applications. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 993\u20131008.","author":"Nan Yuhong","year":"2015","unstructured":"Yuhong Nan, Min Yang, Zhemin Yang, Shunfan Zhou, Guofei Gu, and XiaoFeng Wang. 2015. Uipicker: User-input privacy identification in mobile applications. In 24th {USENIX} Security Symposium ({USENIX} Security 15). 993\u20131008."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","unstructured":"Victor Naroditskiy Nicholas\u00a0R Jennings Pascal Van\u00a0Hentenryck and Manuel Cebrian. 2013. Crowdsourcing dilemma. arXiv preprint arXiv:1304.3548(2013).","DOI":"10.1098\/rsif.2014.0532"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1086\/323504"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523653"},{"key":"e_1_3_2_1_43_1","first-page":"9","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford Alec","year":"2019","unstructured":"Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, and Ilya Sutskever. 2019. Language models are unsupervised multitask learners. OpenAI Blog 1, 8 (2019), 9.","journal-title":"OpenAI Blog"},{"key":"e_1_3_2_1_44_1","volume-title":"Model-Based Fuzz Testing. In 2012 IEEE Fifth International Conference on Software Testing, Verification and Validation. IEEE, 814\u2013814","author":"Schieferdecker Ina","year":"2012","unstructured":"Ina Schieferdecker. 2012. Model-Based Fuzz Testing. In 2012 IEEE Fifth International Conference on Software Testing, Verification and Validation. IEEE, 814\u2013814."},{"key":"e_1_3_2_1_45_1","unstructured":"Weckert Simon. 2020. Google Maps Hacks. http:\/\/www.simonweckert.com\/googlemapshacks.html."},{"key":"e_1_3_2_1_46_1","unstructured":"Irene Solaiman Miles Brundage Jack Clark Amanda Askell Ariel Herbert-Voss Jeff Wu Alec Radford and Jasmine Wang. 2019. Release strategies and the social impacts of language models. arXiv preprint arXiv:1908.09203(2019)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23205"},{"key":"e_1_3_2_1_48_1","volume-title":"Domain-weighted majority voting for crowdsourcing","author":"Tao Dapeng","year":"2018","unstructured":"Dapeng Tao, Jun Cheng, Zhengtao Yu, Kun Yue, and Lizhen Wang. 2018. Domain-weighted majority voting for crowdsourcing. IEEE transactions on neural networks and learning systems 30, 1(2018), 163\u2013174."},{"key":"e_1_3_2_1_49_1","unstructured":"usda.gov. 2019. Price Spreads from Farm to Consumer. https:\/\/www.ers.usda.gov\/data-products\/price-spreads-from-farm-to-consumer\/."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"crossref","unstructured":"Mark Utting Alexander Pretschner and Bruno Legeard. 2012. A taxonomy of model-based testing approaches. Software testing verification and reliability 22 5(2012) 297\u2013312.","DOI":"10.1002\/stvr.456"},{"key":"e_1_3_2_1_51_1","unstructured":"Gang Wang Bolun Wang Tianyi Wang Ana Nika Bingzhe Liu Haitao Zheng and Ben\u00a0Y Zhao. 2015. Attacks and defenses in crowdsourced mapping services. CoRR abs\/1508.00837(2015)."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2906388.2906420"},{"key":"e_1_3_2_1_53_1","volume-title":"Ghost riders: Sybil attacks on crowdsourced mobile mapping services","author":"Wang Gang","year":"2018","unstructured":"Gang Wang, Bolun Wang, Tianyi Wang, Ana Nika, Haitao Zheng, and Ben\u00a0Y Zhao. 2018. Ghost riders: Sybil attacks on crowdsourced mobile mapping services. IEEE\/ACM transactions on networking 26, 3 (2018), 1123\u20131136."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2016.7721739"},{"key":"e_1_3_2_1_55_1","volume-title":"Security and privacy in mobile crowdsourcing networks: challenges and opportunities","author":"Yang Kan","year":"2015","unstructured":"Kan Yang, Kuan Zhang, Ju Ren, and Xuemin Shen. 2015. Security and privacy in mobile crowdsourcing networks: challenges and opportunities. IEEE communications magazine 53, 8 (2015), 75\u201381."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133990"},{"key":"e_1_3_2_1_57_1","unstructured":"Rowan Zellers Ari Holtzman Hannah Rashkin Yonatan Bisk Ali Farhadi Franziska Roesner and Yejin Choi. 2019. Defending against neural fake news. In Advances in Neural Information Processing Systems. 9051\u20139062."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6567059"},{"key":"e_1_3_2_1_59_1","volume-title":"Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. In 2020 IEEE Symposium on Security and Privacy. IEEE.","author":"Zhao Qingchuan","year":"2020","unstructured":"Qingchuan Zhao, Chaoshun Zuo, Dolan-Gavitt Brendan, Giancarlo Pellegrino, and Zhiqiang Lin. 2020. Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. In 2020 IEEE Symposium on Security and Privacy. IEEE."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23052"}],"event":{"name":"ACSAC '21: Annual Computer Security Applications Conference","acronym":"ACSAC '21","location":"Virtual Event USA"},"container-title":["Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3485888","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3485832.3485888","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:14:21Z","timestamp":1755890061000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3485888"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,6]]},"references-count":60,"alternative-id":["10.1145\/3485832.3485888","10.1145\/3485832"],"URL":"https:\/\/doi.org\/10.1145\/3485832.3485888","relation":{},"subject":[],"published":{"date-parts":[[2021,12,6]]},"assertion":[{"value":"2021-12-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}