{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:23:25Z","timestamp":1781281405477,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,14]],"date-time":"2024-04-14T00:00:00Z","timestamp":1713052800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,14]]},"DOI":"10.1145\/3647632.3651389","type":"proceedings-article","created":{"date-parts":[[2024,6,7]],"date-time":"2024-06-07T12:52:14Z","timestamp":1717764734000},"page":"65-68","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Toward an Android Static Analysis Approach for Data Protection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-0434-381X","authenticated-orcid":false,"given":"Mugdha","family":"Khedkar","sequence":"first","affiliation":[{"name":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Heinz Nixdorf Institute, Paderborn University and Fraunhofer IEM, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,6,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Retrieved","year":"2024","unstructured":"2018. Data Privacy Vocabulary. Retrieved March 15, 2024 from https:\/\/w3c.github.io\/dpv\/dpv\/"},{"key":"e_1_3_2_1_2_1","volume-title":"Retrieved","year":"2024","unstructured":"2018. The European parliament and the council of the European union. General Data Protection Regulation (GDPR). Retrieved March 15, 2024 from https:\/\/eurlex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"e_1_3_2_1_3_1","volume-title":"Retrieved","author":"2018. Information Commission","year":"2018","unstructured":"2018. Information Commissioner's Office. 2018. Data Protection Impact Assessments (DPIAs). Retrieved March 15, 2024 from https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/data-protection-impact-assessments-dpias\/"},{"key":"e_1_3_2_1_4_1","volume-title":"Retrieved","year":"2024","unstructured":"2019. Anonymization in Data Privacy. Retrieved March 15, 2024 from https:\/\/www.theguardian.com\/technology\/2019\/jul\/23\/anonymised-data-never-be-anonymous-enough-study-finds"},{"key":"e_1_3_2_1_5_1","unstructured":"2022. Google Play. Retrieved March 15 2024 from https:\/\/blog.google\/products\/google-play\/data-safety\/"},{"key":"e_1_3_2_1_6_1","volume-title":"Retrieved","year":"2024","unstructured":"2023. See No Evil: Loopholes in Google's Data Safety Labels Keep Companies in the Clear and Consumers in the Dark. Retrieved March 15, 2024 from https:\/\/foundation.mozilla.org\/en\/campaigns\/googles-data-safety-labels\/"},{"key":"e_1_3_2_1_7_1","volume-title":"Handbook of Applied Cryptography","author":"Menezes A. J.","unstructured":"A. J. Menezes, S. A. Vanstone, and P. C. V. Oorschot. 1996. Handbook of Applied Cryptography (1st ed.). CRC Press.","edition":"1"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/2818754.2818808"},{"key":"e_1_3_2_1_10_1","volume-title":"Privacy by design: The 7 foundational principles. Retrieved","author":"Cavoukian Ann","year":"2023","unstructured":"Ann Cavoukian. 2009. Privacy by design: The 7 foundational principles. Retrieved May 2, 2023 from https:\/\/www.ipc.on.ca\/wp-content\/uploads\/resources\/7foundationalprinciples.pdf"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/53990.53994"},{"key":"e_1_3_2_1_12_1","volume-title":"SUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps. In 24th USENIX Security Symposium (USENIX Security 15)","author":"Huang Jianjun","year":"2015","unstructured":"Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, and Guofei Jiang. 2015. SUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 977--992. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/huang"},{"key":"e_1_3_2_1_13_1","volume-title":"SootFX: A Static Code Feature Extraction Tool for Java and Android. In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM). IEEE, 181--186","author":"Karakaya Kadiray","year":"2021","unstructured":"Kadiray Karakaya and Eric Bodden. 2021. SootFX: A Static Code Feature Extraction Tool for Java and Android. In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM). IEEE, 181--186. https:\/\/www.bodden.de\/pubs\/kb21static.pdf"},{"key":"e_1_3_2_1_14_1","volume-title":"2023 10th International Conference on Mobile Software Engineering and Systems 2023 (MobileSoft).","author":"Kober Maria","year":"2023","unstructured":"Maria Kober, Jordan Samhi, Steven Arzt, Tegawend\u00e9 F Bissyand\u00e9, and Jacques Klein. 2023. Sensitive and Personal Data: What Exactly Are You Talking About?. In 2023 10th International Conference on Mobile Software Engineering and Systems 2023 (MobileSoft)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_2_1_17_1","unstructured":"M. Jensen C. Lauradoux and K. Limniotis. 2019. Pseudonymisation techniques and best practices. Technical Report. European Union Agency for Cybersecurity (ENISA). https:\/\/www.enisa.europa.eu\/publications\/pseudonymisation-techniques-and-best-practices"},{"key":"e_1_3_2_1_18_1","volume-title":"UIPicker: User-Input Privacy Identification in Mobile Applications. In 24th USENIX Security Symposium (USENIX Security 15)","author":"Nan Yuhong","year":"2015","unstructured":"Yuhong Nan, Min Yang, Zhemin Yang, Shunfan Zhou, Guofei Gu, and XiaoFeng Wang. 2015. UIPicker: User-Input Privacy Identification in Mobile Applications. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 993--1008. https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/nan"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM52516.2021.00031"},{"key":"e_1_3_2_1_20_1","volume-title":"Security-Relevant Methods. In IEEE\/ACM International Conference on Automated Software Engineering (ASE","author":"Piskachev Goran","year":"2019","unstructured":"Goran Piskachev, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. 2019. SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. In IEEE\/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track. https:\/\/www.bodden.de\/pubs\/ase19swanAssist.pdf"},{"key":"e_1_3_2_1_21_1","volume-title":"Codebase-Adaptive Detection of Security-Relevant Methods. In ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA).","author":"Piskachev Goran","year":"2019","unstructured":"Goran Piskachev, Lisa Nguyen Quang Do, and Eric Bodden. 2019. Codebase-Adaptive Detection of Security-Relevant Methods. In ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)."},{"key":"e_1_3_2_1_22_1","volume-title":"2014 Network and Distributed System Security Symposium (NDSS). https:\/\/www.bodden.de\/pubs\/rab14classifying.pdf","author":"Rasthofer Siegfried","year":"2014","unstructured":"Siegfried Rasthofer, Steven Arzt, and Eric Bodden. 2014. A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks. In 2014 Network and Distributed System Security Symposium (NDSS). https:\/\/www.bodden.de\/pubs\/rab14classifying.pdf"},{"key":"e_1_3_2_1_23_1","volume-title":"Steven Arzt, Tegawend\u00e9 F Bissyand\u00e9, and Jacques Klein.","author":"Samhi Jordan","year":"2023","unstructured":"Jordan Samhi, Maria Kober, Abdoul Kader Kabore, Steven Arzt, Tegawend\u00e9 F Bissyand\u00e9, and Jacques Klein. 2023. Negative Results of Fusing Code and Documentation for Learning to Accurately Identify Sensitive Source and Sink Methods. In 2023 30th edition of the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER).","edition":"30"},{"key":"e_1_3_2_1_24_1","volume-title":"2023 IEEE\/ACM 45th IEEE International Conference on Software Engineering","author":"Tan Zeya","year":"2023","unstructured":"Zeya Tan and Wei Song. 2023. PTPDroid: Detecting Violated User Privacy Disclosures to Third-Parties of Android Apps. In 2023 IEEE\/ACM 45th IEEE International Conference on Software Engineering (Melbourne, Australia). https:\/\/figshare.com\/s\/e6f5ff6b7478d571a9a9"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3549035.3561185"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","unstructured":"Kaifa Zhao Xian Zhan Le Yu Shiyao Zhou Hao Zhou Xiapu Luo Haoyu Wang and Yepang Liu. 2023. Demystifying Privacy Policy of Third-Party Libraries in Mobile Apps. 10.48550\/ARXIV.2301.12348","DOI":"10.48550\/ARXIV.2301.12348"}],"event":{"name":"MOBILESoft '24: IEEE\/ACM 11th International Conference on Mobile Software Engineering and Systems","location":"Lisbon Portugal","acronym":"MOBILESoft '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"]},"container-title":["Proceedings of the IEEE\/ACM 11th International Conference on Mobile Software Engineering and Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3647632.3651389","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3647632.3651389","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:03:38Z","timestamp":1750291418000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3647632.3651389"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,14]]},"references-count":25,"alternative-id":["10.1145\/3647632.3651389","10.1145\/3647632"],"URL":"https:\/\/doi.org\/10.1145\/3647632.3651389","relation":{},"subject":[],"published":{"date-parts":[[2024,4,14]]},"assertion":[{"value":"2024-06-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}