{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,12]],"date-time":"2026-09-12T02:22:34Z","timestamp":1789179754334,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":64,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,2,6]],"date-time":"2024-02-06T00:00:00Z","timestamp":1707177600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"CityU APRC grant","award":["9610563"],"award-info":[{"award-number":["9610563"]}]},{"name":"Research Grants Council of Hong Kong","award":["CityU21219223"],"award-info":[{"award-number":["CityU21219223"]}]},{"name":"Research Grants Council of Hong Kong","award":["C1029-22G"],"award-info":[{"award-number":["C1029-22G"]}]},{"name":"Research Grants Council of Hong Kong","award":["PolyU1522412"],"award-info":[{"award-number":["PolyU1522412"]}]},{"name":"National Natural Science Foundation","award":["62372490"],"award-info":[{"award-number":["62372490"]}]},{"name":"CCF-NSFOCUS KunPeng Research Fund"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,2,6]]},"DOI":"10.1145\/3597503.3623317","type":"proceedings-article","created":{"date-parts":[[2024,2,6]],"date-time":"2024-02-06T20:53:16Z","timestamp":1707252796000},"page":"1-13","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Attention! Your Copied Data is Under Monitoring: A Systematic Study of Clipboard Usage in Android Apps"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2483-8890","authenticated-orcid":false,"given":"Yongliang","family":"Chen","sequence":"first","affiliation":[{"name":"City University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2692-8627","authenticated-orcid":false,"given":"Ruoqin","family":"Tang","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3581-1500","authenticated-orcid":false,"given":"Chaoshun","family":"Zuo","sequence":"additional","affiliation":[{"name":"Ohio State University, Columbus, Ohio, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4646-7146","authenticated-orcid":false,"given":"Xiaokuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, Virginia, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5321-5740","authenticated-orcid":false,"given":"Lei","family":"Xue","sequence":"additional","affiliation":[{"name":"Sun Yat-Sen University, Guangzhou, Guangdong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8211-257X","authenticated-orcid":false,"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-2846","authenticated-orcid":false,"given":"Qingchuan","family":"Zhao","sequence":"additional","affiliation":[{"name":"City University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,2,6]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-018-0053-2"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290353"},{"key":"e_1_3_2_1_4_1","volume-title":"USENIX Security Symposium","volume":"19","author":"Alrawi Omar","year":"2019","unstructured":"Omar Alrawi, Chaoshun Zuo, Ruian Duan, Ranjita Pai Kasturi, Zhiqiang Lin, and Brendan Saltaformaggio. 2019. The Betrayal At Cloud City: An Empirical Analysis Of Cloud-Based Mobile Backends.. In USENIX Security Symposium, Vol. 19."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3007788.3007795"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.61"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3303772.3303813"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2689012"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2790003"},{"key":"e_1_3_2_1_11_1","unstructured":"Composables. 2023. Android Distribution Chart. https:\/\/www.composables.com\/tools\/distribution-chart."},{"key":"e_1_3_2_1_12_1","unstructured":"Android developers. 2019. Privacy changes in Android 10. https:\/\/developer.android.com\/about\/versions\/10\/privacy\/changes."},{"key":"e_1_3_2_1_13_1","unstructured":"Android developers. 2023. Copy and paste. https:\/\/developer.android.com\/develop\/ui\/views\/touch-and-input\/copy-paste#PastingSystemNotifications."},{"key":"e_1_3_2_1_14_1","volume-title":"Deepbindiff: Learning program-wide code representations for binary diffing. In Network and distributed system security symposium.","author":"Duan Yue","year":"2020","unstructured":"Yue Duan, Xuezixiang Li, Jinghan Wang, and Heng Yin. 2020. Deepbindiff: Learning program-wide code representations for binary diffing. In Network and distributed system security symposium."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 29th USENIX Conference on Security Symposium. 2379--2396","author":"Elsabagh Mohamed","year":"2020","unstructured":"Mohamed Elsabagh, Ryan Johnson, Angelos Stavrou, Chaoshun Zuo, Qingchuan Zhao, and Zhiqiang Lin. 2020. FIRMSCOPE: Automatic uncovering of privilege-escalation vulnerabilities in pre-installed apps in android firmware. In Proceedings of the 29th USENIX Conference on Security Symposium. 2379--2396."},{"key":"e_1_3_2_1_16_1","volume-title":"Get Off of My Clipboard: On How Usability Trumps Security in Android Password Managers. In Financial Cryptography and Data Security: 17th International Conference, FC 2013","author":"Fahl Sascha","year":"2013","unstructured":"Sascha Fahl, Marian Harbach, Marten Oltrogge, Thomas Muders, and Matthew Smith. 2013. Hey, You, Get Off of My Clipboard: On How Usability Trumps Security in Android Password Managers. In Financial Cryptography and Data Security: 17th International Conference, FC 2013, Okinawa, Japan, April 1--5, 2013, Revised Selected Papers 17. Springer, 144--161."},{"key":"e_1_3_2_1_17_1","volume-title":"Mauro Conti, and Muttukrishnan Rajarajan.","author":"Faruki Parvez","year":"2014","unstructured":"Parvez Faruki, Ammar Bharmal, Vijay Laxmi, Vijay Ganmoor, Manoj Singh Gaur, Mauro Conti, and Muttukrishnan Rajarajan. 2014. Android security: a survey of issues, malware penetration, and defenses. IEEE communications surveys & tutorials 17, 2 (2014), 998--1022."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"e_1_3_2_1_19_1","first-page":"110","article-title":"Information flow analysis of android applications in droidsafe","volume":"15","author":"Gordon Michael I","year":"2015","unstructured":"Michael I Gordon, Deokhwan Kim, Jeff H Perkins, Limei Gilham, Nguyen Nguyen, and Martin C Rinard. 2015. Information flow analysis of android applications in droidsafe.. In NDSS, Vol. 15. 110.","journal-title":"NDSS"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2013.6693097"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32101-7_15"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/WIW.2016.040"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.522"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-50578-3_41"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24212"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/Blockchain50366.2020.00010"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.04.001"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579447"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00039"},{"key":"e_1_3_2_1_31_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Ni Tao","year":"2023","unstructured":"Tao Ni, Guohao Lan, Jia Wang, Qingchuan Zhao, and Weitao Xu. 2023. Eavesdropping Mobile App Activity via {Radio-Frequency} Energy Harvesting. In 32nd USENIX Security Symposium (USENIX Security 23). 3511--3528."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3570361.3613288"},{"key":"e_1_3_2_1_33_1","volume-title":"Narseo Vallina-Rodriguez, and Serge Egelman.","author":"Reardon Joel","year":"2019","unstructured":"Joel Reardon, \u00c1lvaro Feal, Primal Wijesekera, Amit Elazari Bar On, Narseo Vallina-Rodriguez, and Serge Egelman. 2019. 50 ways to leak your data: An exploration of apps' circumvention of the android permissions system. In 28th USENIX security symposium (USENIX security 19). 603--620."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484547"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3017427"},{"key":"e_1_3_2_1_36_1","unstructured":"Techtrickz. 2022. How to Get Notification When Apps Read Your Clipboard Content on Android. https:\/\/techtrickz.com\/how-to\/get-notification-when-apps-read-clipboard-content-android\/."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663887.2663905"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00086"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3418905"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3183575"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63086-7_17"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00063"},{"key":"e_1_3_2_1_43_1","volume-title":"Broken Relationship of Mobile User Intentions and Permission Control of Shared System Resources. In 2019 IEEE Conference on Dependable and Secure Computing (DSC). IEEE, 1--8.","author":"Wu Hao","year":"2019","unstructured":"Hao Wu, Zheng Qin, Xuejin Tian, Edward Sun, Fengyuan Xu, and Sheng Zhong. 2019. Broken Relationship of Mobile User Intentions and Permission Control of Shared System Resources. In 2019 IEEE Conference on Dependable and Secure Computing (DSC). IEEE, 1--8."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970278"},{"key":"e_1_3_2_1_45_1","volume-title":"A visual analytics framework for the detection of anomalous call stack trees in high performance computing applications","author":"Xie Cong","year":"2018","unstructured":"Cong Xie, Wei Xu, and Klaus Mueller. 2018. A visual analytics framework for the detection of anomalous call stack trees in high performance computing applications. IEEE transactions on visualization and computer graphics 25, 1 (2018), 215--224."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.40"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2020.2996433"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00105"},{"key":"e_1_3_2_1_50_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Xue Lei","year":"2017","unstructured":"Lei Xue, Yajin Zhou, Ting Chen, Xiapu Luo, and Guofei Gu. 2017. Malton: Towards {On-Device} {Non-Invasive} Mobile Malware Analysis for {ART}. In 26th USENIX Security Symposium (USENIX Security 17). 289--306."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.5555\/3288647.3288710"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243820"},{"key":"e_1_3_2_1_53_1","volume-title":"DIMVA 2014, Egham, UK, July 10--11, 2014. Proceedings 11","author":"Zhang Xiao","year":"2014","unstructured":"Xiao Zhang and Wenliang Du. 2014. Attacks on android clipboard. In Detection of Intrusions and Malware, and Vulnerability Assessment: 11th International Conference, DIMVA 2014, Egham, UK, July 10--11, 2014. Proceedings 11. Springer, 72--91."},{"key":"e_1_3_2_1_54_1","volume-title":"DAISY: Dynamic-Analysis-Induced Source Discovery for Sensitive Data. ACM Transactions on Software Engineering and Methodology","author":"Zhang Xueling","year":"2022","unstructured":"Xueling Zhang, John Heaps, Rocky Slavin, Jianwei Niu, Travis D Breaux, and Xiaoyin Wang. 2022. DAISY: Dynamic-Analysis-Induced Source Discovery for Sensitive Data. ACM Transactions on Software Engineering and Methodology (2022), 1--32."},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the Symposium on Network and Distributed System Security.","author":"Zhang Xiaokuan","year":"2018","unstructured":"Xiaokuan Zhang, Xueqiang Wang, Xiaolong Bai, Yinqian Zhang, and XiaoFeng Wang. 2018. Os-level side channels without procfs: Exploring cross-app information leakage on ios. In Proceedings of the Symposium on Network and Distributed System Security."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978360"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"Xiao Zhang Kailiang Ying Yousra Aafer Zhenshen Qiu and Wenliang Du. 2016. Life after App Uninstallation: Are the Data Still Alive? Data Residue Attacks on Android.. In NDSS.","DOI":"10.14722\/ndss.2016.23061"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00072"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23052"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416637"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0037"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052609"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00009"},{"key":"e_1_3_2_1_64_1","volume-title":"Neural machine translation inspired binary code similarity comparison beyond function pairs. arXiv preprint arXiv:1808.04706","author":"Zuo Fei","year":"2018","unstructured":"Fei Zuo, Xiaopeng Li, Patrick Young, Lannan Luo, Qiang Zeng, and Zhexin Zhang. 2018. Neural machine translation inspired binary code similarity comparison beyond function pairs. arXiv preprint arXiv:1808.04706 (2018)."}],"event":{"name":"ICSE '24: IEEE\/ACM 46th International Conference on Software Engineering","location":"Lisbon Portugal","acronym":"ICSE '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3623317","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597503.3623317","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:45Z","timestamp":1750182525000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3623317"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,6]]},"references-count":64,"alternative-id":["10.1145\/3597503.3623317","10.1145\/3597503"],"URL":"https:\/\/doi.org\/10.1145\/3597503.3623317","relation":{},"subject":[],"published":{"date-parts":[[2024,2,6]]},"assertion":[{"value":"2024-02-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}