{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T22:34:22Z","timestamp":1787524462035,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":71,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,21]],"date-time":"2022-05-21T00:00:00Z","timestamp":1653091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Hong Kong RGC Project","award":["PolyU15223918"],"award-info":[{"award-number":["PolyU15223918"]}]},{"name":"Innovation and Technology Commission of Hong Kong","award":["PiH\/255\/21"],"award-info":[{"award-number":["PiH\/255\/21"]}]},{"name":"Guangdong Basic and Applied Basic Research Fund","award":["2021A1515011562"],"award-info":[{"award-number":["2021A1515011562"]}]},{"name":"National Natural Science Foundation of China","award":["61932021, 61802164, 61902056"],"award-info":[{"award-number":["61932021, 61802164, 61902056"]}]},{"name":"Hong Kong GRF Project","award":["16211919"],"award-info":[{"award-number":["16211919"]}]},{"name":"Guangdong Provincial Key Laboratory","award":["2020B121201001"],"award-info":[{"award-number":["2020B121201001"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,21]]},"DOI":"10.1145\/3510003.3510074","type":"proceedings-article","created":{"date-parts":[[2022,7,5]],"date-time":"2022-07-05T22:42:59Z","timestamp":1657060979000},"page":"125-137","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":20,"title":["Aper"],"prefix":"10.1145","author":[{"given":"Sinan","family":"Wang","sequence":"first","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yibo","family":"Wang","sequence":"additional","affiliation":[{"name":"Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xian","family":"Zhan","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ying","family":"Wang","sequence":"additional","affiliation":[{"name":"Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yepang","family":"Liu","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shing-Chi","family":"Cheung","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, and Guangzhou and HKUST Fok Ying Tung Research Institute, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,7,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2021. ACRA\/acra. Retrieved August 23 2021 fromhttps:\/\/github.com\/ACRA\/acra"},{"key":"e_1_3_2_1_2_1","unstructured":"2021. Activity | Android Developers. Retrieved August 16 2021 from https:\/\/developer.android.com\/reference\/android\/app\/Activity#onStart()"},{"key":"e_1_3_2_1_3_1","volume-title":"android - Accessing getExternalStorageDirectory - Stack Overflow. Retrieved","year":"2021","unstructured":"2021. android - Accessing getExternalStorageDirectory - Stack Overflow. Retrieved August 27, 2021 from https:\/\/stackoverflow.com\/questions\/34865206\/"},{"key":"e_1_3_2_1_4_1","volume-title":"Retrieved","year":"2021","unstructured":"2021. Android Apps on Google Play. Retrieved January 29, 2021 from https:\/\/play.google.com\/store\/apps"},{"key":"e_1_3_2_1_5_1","unstructured":"2021. [APP][6.0+] NetGuard - No-root firewall | Page 635 | XDA Forums. Retrieved July 8 2021 from https:\/\/forum.xda-developers.com\/t\/app-6-0-netguard-no-root-firewall.3233012\/post-85296183"},{"key":"e_1_3_2_1_6_1","volume-title":"below 23 android xiaomi devices permission - Stack Overflow. Retrieved","year":"2021","unstructured":"2021. below 23 android xiaomi devices permission - Stack Overflow. Retrieved July 2, 2021 from https:\/\/stackoverflow.com\/a\/39655365\/14233132"},{"key":"e_1_3_2_1_7_1","volume-title":"F-Droid - Free and Open Source Android App Repository. Retrieved","year":"2021","unstructured":"2021. F-Droid - Free and Open Source Android App Repository. Retrieved January 28, 2021 from https:\/\/f-droid.org\/"},{"key":"e_1_3_2_1_8_1","unstructured":"2021. FunkyMuse\/KAHelpers. Retrieved September 1 2021 from https:\/\/github.com\/FunkyMuse\/KAHelpers"},{"key":"e_1_3_2_1_9_1","unstructured":"2021. GitHub. Retrieved August 3 2021 from https:\/\/github.com\/"},{"key":"e_1_3_2_1_10_1","volume-title":"Retrieved","year":"2021","unstructured":"2021. Google Play Ranking | AppBrain. Retrieved July 27, 2021 from https:\/\/www.appbrain.com\/stats\/google-play-rankings\/"},{"key":"e_1_3_2_1_11_1","volume-title":"Retrieved","year":"2021","unstructured":"2021. Improve your code with lint checks | Android Developers. Retrieved August 23, 2021 from https:\/\/developer.android.com\/studio\/write\/lint"},{"key":"e_1_3_2_1_12_1","volume-title":"Issue #202 of project WiFiAnalyzer. Retrieved","year":"2021","unstructured":"2021. Issue #202 of project WiFiAnalyzer. Retrieved July 5, 2021 from https:\/\/github.com\/VREMSoftwareDevelopment\/WiFiAnalyzer\/issues\/202"},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","author":"Issue","year":"2021","unstructured":"2021. Issue #2110 of project k-9. Retrieved July 25, 2021 from https:\/\/github.com\/k9mail\/k-9\/issues\/2110"},{"key":"e_1_3_2_1_14_1","volume-title":"Retrieved","year":"2021","unstructured":"2021. java - cannot open camera \"0\" without camera permission - Stack Overflow. Retrieved August 23, 2021 from https:\/\/stackoverflow.com\/questions\/67553067"},{"key":"e_1_3_2_1_15_1","volume-title":"javiersantos\/MLManager. Retrieved","year":"2021","unstructured":"2021. javiersantos\/MLManager. Retrieved August 23, 2021 from https:\/\/github.com\/javiersantos\/MLManager"},{"key":"e_1_3_2_1_16_1","volume-title":"koelleChristian\/trickytripper. Retrieved","year":"2021","unstructured":"2021. koelleChristian\/trickytripper. Retrieved August 23, 2021 from https:\/\/github.com\/koelleChristian\/trickytripper"},{"key":"e_1_3_2_1_17_1","unstructured":"2021. M66B\/NetGuard. Retrieved August 23 2021 from https:\/\/github.com\/M66B\/NetGuard"},{"key":"e_1_3_2_1_18_1","volume-title":"Meet Google Play's target API level requirement | Android Developers. Retrieved Decemeber 29","year":"2021","unstructured":"2021. Meet Google Play's target API level requirement | Android Developers. Retrieved Decemeber 29, 2021 from https:\/\/developer.android.com\/google\/play\/requirements\/target-sdk"},{"key":"e_1_3_2_1_19_1","unstructured":"2021. Mygod\/VPNHotspot. Retrieved August 22 2021 from https:\/\/github.com\/Mygod\/VPNHotspot"},{"key":"e_1_3_2_1_20_1","volume-title":"Permissions updates in Android 11 | Android Developers. Retrieved","year":"2021","unstructured":"2021. Permissions updates in Android 11 | Android Developers. Retrieved July 5, 2021 from https:\/\/developer.android.com\/about\/versions\/11\/privacy\/permissions"},{"key":"e_1_3_2_1_21_1","volume-title":"Retrieved","author":"Pull","year":"2021","unstructured":"2021. Pull request #1575 of project syncthing-android. Retrieved August 16, 2021 from https:\/\/github.com\/syncthing\/syncthing-android\/pull\/1575\/files"},{"key":"e_1_3_2_1_22_1","volume-title":"Retrieved","year":"2021","unstructured":"2021. Request app permissions | Android Developers. Retrieved July 28, 2021 from https:\/\/developer.android.com\/training\/permissions\/requesting"},{"key":"e_1_3_2_1_23_1","unstructured":"2021. TelephonyManager | Android Developers. Retrieved August 16 2021 from https:\/\/developer.android.com\/reference\/android\/telephony\/TelephonyManager#getDeviceId()"},{"key":"e_1_3_2_1_24_1","volume-title":"xbmc\/Kore. Retrieved","year":"2021","unstructured":"2021. xbmc\/Kore. Retrieved September 2, 2021 from https:\/\/github.com\/xbmc\/Kore"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243842"},{"key":"e_1_3_2_1_26_1","volume-title":"Ullman","author":"Aho Alfred V.","year":"2007","unstructured":"Alfred V. Aho, Monica S. Lam, Ravi Sethi, and Jeffrey D. Ullman. 2007. Compilers: Principles, Techniques, and Tools (2nd Edition). Pearson Education, Inc. Addison-Wesly, New York, NY, USA."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2016.7823922"},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation","author":"Arzt Steven","unstructured":"Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick D. McDaniel. 2014. FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps. In Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation (Edinburgh, United Kingdom). ACM, 259--269."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"key":"e_1_3_2_1_31_1","volume-title":"On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis. In 25th USENIX Security Symposium","author":"Backes Michael","year":"2016","unstructured":"Michael Backes, Sven Bugiel, Erik Derr, Patrick McDaniel, Damien Octeau, and Sebastian Weisgerber. 2016. On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis. In 25th USENIX Security Symposium (Austin, TX, USA). USENIX Association, 1101--1118."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2351676.2351722"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2259051.2259052"},{"key":"e_1_3_2_1_34_1","volume-title":"Dperm: Assisting the Migration of Android Apps to Runtime Permissions. CoRR abs\/1706.05042","author":"Bogdanas Denis","year":"2017","unstructured":"Denis Bogdanas. 2017. Dperm: Assisting the Migration of Android Apps to Runtime Permissions. CoRR abs\/1706.05042 (2017). arXiv:1706.05042"},{"key":"e_1_3_2_1_35_1","volume-title":"Thirteenth Symposium on Usable Privacy and Security","author":"Bonn\u00e9 Bram","year":"2017","unstructured":"Bram Bonn\u00e9, Sai Teja Peddinti, Igor Bilogrevic, and Nina Taft. 2017. Exploring Decision Making with Android's Runtime Permission Dialogs Using In-context Surveys. In Thirteenth Symposium on Usable Privacy and Security (Santa Clara, CA, USA). USENIX Association, 195--210."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387469"},{"key":"e_1_3_2_1_37_1","volume-title":"10th International Symposium","author":"Christensen Aske Simon","unstructured":"Aske Simon Christensen, Anders M\u00f8ller, and Michael I. Schwartzbach. 2003. Precise Analysis of String Expressions. In Static Analysis, 10th International Symposium (San Diego, CA, USA). Springer, 1--18."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23106"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300027"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3197231.3197255"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897914"},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of the 18th ACM Conference on Computer and Communications Security","author":"Felt Adrienne Porter","unstructured":"Adrienne Porter Felt, Erika Chin, Steve Hanna, Dawn Song, and David A. Wagner. 2011. Android Permissions Demystified. In Proceedings of the 18th ACM Conference on Computer and Communications Security (Chicago, Illinois, USA). ACM, 627--638."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106286"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196533"},{"key":"e_1_3_2_1_46_1","volume-title":"Detecting Stubborn Permission Requests in Android Applications. In 2018 4th International Conference on Big Data Computing and Communications","author":"Huang Jianmeng","year":"2018","unstructured":"Jianmeng Huang, Wenchao Huang, Fuyou Miao, and Yan Xiong. 2018. Detecting Stubborn Permission Requests in Android Applications. In 2018 4th International Conference on Big Data Computing and Communications (Chicago, IL, USA). IEEE, 84--89."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.74"},{"key":"e_1_3_2_1_48_1","volume-title":"The Soot Framework for Java Program Analysis: A Retrospective. In Cetus Users and Compiler Infastructure Workshop (CETUS","author":"Lam Patrick","year":"2011","unstructured":"Patrick Lam, Eric Bodden, Ondrej Lhot\u00e1k, and Laurie Hendren. 2011. The Soot Framework for Java Program Analysis: A Retrospective. In Cetus Users and Compiler Infastructure Workshop (CETUS 2011)."},{"key":"e_1_3_2_1_49_1","volume-title":"Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering","author":"Li Ding","unstructured":"Ding Li, Yingjun Lyu, Mian Wan, and William G. J. Halfond. 2015. String Analysis for Java and Android Applications. In Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering (Bergamo, Italy). ACM, 661--672."},{"key":"e_1_3_2_1_50_1","volume-title":"IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. In 37th IEEE\/ACM International Conference on Software Engineering, ICSE 2015","volume":"1","author":"Li Li","year":"2015","unstructured":"Li Li, Alexandre Bartel, Tegawend\u00e9 F. Bissyand\u00e9, Jacques Klein, Yves Le Traon, Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick D. McDaniel. 2015. IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. In 37th IEEE\/ACM International Conference on Software Engineering, ICSE 2015, , May 16--24, 2015, Volume 1 (Florence, Italy). IEEE, 280--291."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213857"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.38"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950297"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2889160.2889178"},{"key":"e_1_3_2_1_55_1","volume-title":"Future Trends in Software Engineering Research for Mobile Apps. In 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering","author":"Nagappan Meiyappan","year":"2016","unstructured":"Meiyappan Nagappan and Emad Shihab. 2016. Future Trends in Software Engineering Research for Mobile Apps. In 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (Osaka, Japan). IEEE, 21--32."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213873"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180172"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106250"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338950"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.70"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464806"},{"key":"e_1_3_2_1_62_1","volume-title":"Reevaluating Android Permission Gaps with Static and Dynamic Analysis. In 2015 IEEE Global Communications Conference","author":"Wang Haoyu","year":"2015","unstructured":"Haoyu Wang, Yao Guo, Zihao Tang, Guangdong Bai, and Xiangqun Chen. 2015. Reevaluating Android Permission Gaps with Static and Dynamic Analysis. In 2015 IEEE Global Communications Conference (San Diego, CA, USA). IEEE, 1--6."},{"key":"e_1_3_2_1_63_1","volume-title":"Runtime Permission Issues in Android Apps: Taxonomy, Practices, and Ways Forward. CoRR abs\/2106.13012","author":"Wang Ying","year":"2021","unstructured":"Ying Wang, Yibo Wang, Sinan Wang, Yepang Liu, Chang Xu, Shing-Chi Cheung, Hai Yu, and Zhiliang Zhu. 2021. Runtime Permission Issues in Android Apps: Taxonomy, Practices, and Ways Forward. CoRR abs\/2106.13012 (2021). arXiv:2106.13012"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106294"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00094"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.45"},{"key":"e_1_3_2_1_67_1","volume-title":"Static Control-Flow Analysis of User-Driven Callbacks in Android Applications. In 2015 IEEE\/ACM 37th International Conference on Software Engineering","author":"Yang Shengqian","year":"2015","unstructured":"Shengqian Yang, Dacong Yan, Haowei Wu, Yan Wang, and Atanas Rountev. 2015. Static Control-Flow Analysis of User-Driven Callbacks in Android Applications. In 2015 IEEE\/ACM 37th International Conference on Software Engineering (Florence, Italy). IEEE, 89--99."},{"key":"e_1_3_2_1_68_1","volume-title":"ATVHUNTER: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications. In 2021 IEEE\/ACM 43rd International Conference on Software Engineering","author":"Zhan Xian","year":"2021","unstructured":"Xian Zhan, Lingling Fan, Sen Chen, Feng Wu, Tianming Liu, Xiapu Luo, and Yang Liu. 2021. ATVHUNTER: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications. In 2021 IEEE\/ACM 43rd International Conference on Software Engineering (Madrid, Spain). IEEE, 1695--1707."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416582"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2021.3078628"},{"key":"e_1_3_2_1_71_1","volume-title":"Big Changes: An Updated View on the Android Permission System. In 19th International Symposium on Research in Attacks, Intrusions, and Defenses","author":"Zhauniarovich Yury","year":"2016","unstructured":"Yury Zhauniarovich and Olga Gadyatskaya. 2016. Small Changes, Big Changes: An Updated View on the Android Permission System. In 19th International Symposium on Research in Attacks, Intrusions, and Defenses (Paris, France). Springer, 346--367."}],"event":{"name":"ICSE '22: 44th International Conference on Software Engineering","location":"Pittsburgh Pennsylvania","acronym":"ICSE '22","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"]},"container-title":["Proceedings of the 44th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3510003.3510074","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3510003.3510074","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:12:04Z","timestamp":1750191124000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3510003.3510074"}},"subtitle":["evolution-aware runtime permission misuse detection for Android apps"],"short-title":[],"issued":{"date-parts":[[2022,5,21]]},"references-count":71,"alternative-id":["10.1145\/3510003.3510074","10.1145\/3510003"],"URL":"https:\/\/doi.org\/10.1145\/3510003.3510074","relation":{},"subject":[],"published":{"date-parts":[[2022,5,21]]},"assertion":[{"value":"2022-07-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}