{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T17:07:29Z","timestamp":1780420049383,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,19]],"date-time":"2024-06-19T00:00:00Z","timestamp":1718755200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,19]]},"DOI":"10.1145\/3714393.3726508","type":"proceedings-article","created":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T18:38:47Z","timestamp":1749062327000},"page":"209-220","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Multi-Device Context-Sensitive Attacks Against Privacy"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0194-0163","authenticated-orcid":false,"given":"Edgardo A.","family":"Barsallo Yi","sequence":"first","affiliation":[{"name":"Delivery Dynamics, Panama, Panama, Panama"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3296-3410","authenticated-orcid":false,"given":"Joshua D. O.","family":"Majors","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0186-3170","authenticated-orcid":false,"given":"Aditya Vardhan","family":"Padala","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7583-8527","authenticated-orcid":false,"given":"Darren","family":"Wu","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5124-6818","authenticated-orcid":false,"given":"Aravind","family":"Machiry","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4239-5632","authenticated-orcid":false,"given":"Saurabh","family":"Bagchi","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Android Application Collusion Demystified","author":"Abro Fauzia Idrees","unstructured":"Fauzia Idrees Abro, Muttukrishnan Rajarajan, Thomas M Chen, and Yogachandran Rahulamathavan. 2017. Android Application Collusion Demystified. In Future Network Systems and Security, Robin Doss, Selwyn Piramuthu, and Wei Zhou (Eds.). Springer International Publishing, Cham, 176--187."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23384"},{"key":"e_1_3_2_1_3_1","volume-title":"Twelfth Symposium on Usable Privacy and Security (SOUPS","author":"Alohaly Manar","year":"2016","unstructured":"Manar Alohaly and Hassan Takabi. 2016. Better privacy indicators: a new approach to quantification of privacy policies. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). USENIX Association, Denver, CO, USA."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3439802"},{"key":"e_1_3_2_1_5_1","unstructured":"AppBrain. 2024. Most popular Google Play categories. https:\/\/www.appbrain.com\/stats\/andro id-market-app-categories."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"e_1_3_2_1_7_1","unstructured":"American Heart Association. 2024. Target Heart Rates Chart. https:\/\/www.heart.org\/en\/healthyliving\/fitness\/fitness-basics\/target-heart-rates."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388916"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.39"},{"key":"e_1_3_2_1_10_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Boukoros Spyros","year":"2019","unstructured":"Spyros Boukoros, Mathias Humbert, Stefan Katzenbeisser, and Carmela Troncoso. 2019. On (the lack of) location privacy in crowdsourcing applications. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1859--1876."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671758"},{"key":"e_1_3_2_1_12_1","volume-title":"11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Chakraborty Supriyo","year":"2014","unstructured":"Supriyo Chakraborty, Chenguang Shen, Kasturi Rangan Raghavan, Yasser Shoukry, Matt Millar, and Mani Srivastava. 2014. ipShield: A Framework For Enforcing Context-Aware Privacy. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, 143--156."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132029"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2493432.2493498"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.03.067"},{"key":"e_1_3_2_1_16_1","volume-title":"Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps. In 33rd USENIX Security Symposium (USENIX Security 24)","author":"Dhondt Karel","year":"2024","unstructured":"Karel Dhondt, Victor Le Pochat, Yana Dimova, Wouter Joosen, and Stijn Volckaert. 2024. Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps. In 33rd USENIX Security Symposium (USENIX Security 24). USENIX Association, Philadelphia, PA, 5053--5070."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2414"},{"key":"e_1_3_2_1_18_1","volume-title":"International Conference on Security and Privacy in Communication Systems","author":"Dong Shuaike","unstructured":"Shuaike Dong, Menghao Li,Wenrui Diao, Xiangyu Liu, Jian Liu, Zhou Li, Fenghao Xu, Kai Chen, Xiaofeng Wang, and Kehuan Zhang. 2018. Understanding Android Obfuscation Techniques: A Large-Scale Investigation in the Wild. In International Conference on Security and Privacy in Communication Systems. Springer, Springer International Publishing, Cham, 172--192."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/RIVF.2015.7049898"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342428.3342690"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376651"},{"key":"e_1_3_2_1_25_1","volume-title":"Cryptology and Network Security","author":"G\u00fcnther Felix","unstructured":"Felix G\u00fcnther, Mark Manulis, and Andreas Peter. 2014. Privacy-Enhanced Participatory Sensing with Collusion Resistance and Data Aggregation. In Cryptology and Network Security. Springer International Publishing, Cham, 321--336."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2971648.2971708"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2003.1221721"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACII.2019.8925520"},{"key":"e_1_3_2_1_29_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Hassan Wajih Ul","year":"2018","unstructured":"Wajih Ul Hassan, Saad Hussain, and Adam Bates. 2018. Analysis of Privacy Protections in Fitness Tracking Social Networks-or-You can run, but can you hide?. In 27th USENIX Security Symposium (USENIX Security 18). USENIX Association, Baltimore, MD, 497--512."},{"key":"e_1_3_2_1_30_1","unstructured":"Jeremy Hsu. 2018. The Strava Heat Map and the End of Secrets. https:\/\/www.wired.com\/story\/strava-heat-map-military-bases-fitness-trackers-privacy\/."},{"key":"e_1_3_2_1_31_1","volume-title":"Android IPC mechanism","author":"Huang Jim","year":"2012","unstructured":"Jim Huang. 2012. Android IPC mechanism. Southern Taiwan University of Technology (2012)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.3390\/a13080202"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/PERCOM.2019.8767395"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2462456.2464449"},{"key":"e_1_3_2_1_35_1","volume-title":"DEEProtect: Enabling Inference-based Access Control on Mobile Sensing Applications. CoRR abs\/1702.06159","author":"Liu Changchang","year":"2017","unstructured":"Changchang Liu, Supriyo Chakraborty, and Prateek Mittal. 2017. DEEProtect: Enabling Inference-based Access Control on Mobile Sensing Applications. CoRR abs\/1702.06159 (2017). arXiv:1702.06159 http:\/\/arxiv.org\/abs\/1702.06159"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314405"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2906388.2906398"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813668"},{"key":"e_1_3_2_1_39_1","volume-title":"22nd USENIX Security Symposium (USENIX Security 13)","author":"Livshits Benjamin","year":"2013","unstructured":"Benjamin Livshits and Jaeyeon Jung. 2013. Automatic mediation of privacy-sensitive resource access in smartphone applications. In 22nd USENIX Security Symposium (USENIX Security 13). USENIX Association, Washington, DC, 113--130."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2809695.2809719"},{"key":"e_1_3_2_1_41_1","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Michalevsky Yan","year":"2015","unstructured":"Yan Michalevsky, Aaron Schulman, Gunaa Arumugam Veerapandian, Dan Boneh, and Gabi Nakibly. 2015. Powerspy: Location tracking using mobile device power analysis. In 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, DC, 785--800."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025706"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354198"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00026"},{"key":"e_1_3_2_1_45_1","unstructured":"Yuhong Nan Zhemin Yang Xiaofeng Wang Yuan Zhang Donglai Zhu and Min Yang. 2018. Finding Clues for Your Secrets: Semantics-Driven Learning-Based Privacy Discovery in Mobile Apps. In NDSS (San Diego CA USA)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307640"},{"key":"e_1_3_2_1_47_1","volume-title":"Time spent in leisure and sports activities","author":"US Bureau of Labor Statistics. 2023.","year":"2022","unstructured":"US Bureau of Labor Statistics. 2023. Time spent in leisure and sports activities, 2022. https: \/\/www.bls.gov\/opub\/ted\/2023\/time-spent-in-leisure-and-sports-activities-2022.htm. U.S. Department of Labor, The Economics Daily."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.25"},{"key":"e_1_3_2_1_49_1","unstructured":"Ken Paterson. 2020. ATM Usage and Preferences. https:\/\/javelinstrategy.com\/research\/northamerican-paymentsinsights-us-data-summary-report-atm-usage-and-preferences."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3197231.3197246"},{"key":"e_1_3_2_1_51_1","unstructured":"Privacy Query Website. 2025. https:\/\/sites.google.com\/view\/madcap-privacy-attack\/home."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1978945"},{"key":"e_1_3_2_1_53_1","first-page":"39","article-title":"Disagreeable privacy policies: Mismatches between meaning and users' understanding","volume":"30","author":"Reidenberg Joel R","year":"2015","unstructured":"Joel R Reidenberg, Travis Breaux, Lorrie Faith Cranor, Brian French, Amanda Grannis, James T Graves, Fei Liu, Aleecia McDonald, Thomas B Norton, and Rohan Ramanath. 2015. Disagreeable privacy policies: Mismatches between meaning and users' understanding. Berkeley Tech. LJ 30 (2015), 39.","journal-title":"Berkeley Tech. LJ"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3378669"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.3390\/s20030718"},{"key":"e_1_3_2_1_56_1","volume-title":"WearFlow: Expanding Information Flow Analysis To Companion Apps in Wear OS. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID","author":"Tileria Marcos","year":"2020","unstructured":"Marcos Tileria, Jorge Blasco, and Guillermo Suarez-Tangil. 2020. WearFlow: Expanding Information Flow Analysis To Companion Apps in Wear OS. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020). USENIX Association, San Sebastian, 63--75."},{"key":"e_1_3_2_1_57_1","volume-title":"Google Play malware clocks up more than 600 million downloads","author":"Titterington Alanna","year":"2023","unstructured":"Alanna Titterington. 2023. Google Play malware clocks up more than 600 million downloads in 2023. https:\/\/www.kaspersky.com\/blog\/malware-in-google-play-2023\/49579\/."},{"key":"e_1_3_2_1_58_1","volume-title":"Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences. In Thirteenth Symposium on Usable Privacy and Security (SOUPS","author":"Tsai Lynn","year":"2017","unstructured":"Lynn Tsai, Primal Wijesekera, Joel Reardon, Irwin Reyes, Serge Egelman, David Wagner, Nathan Good, and Jung-Wei Chen. 2017. Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences. In Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017). USENIX Association, Santa Clara, CA, 145--162."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.101"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897847"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737633"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/2789168.2790121"},{"key":"e_1_3_2_1_63_1","unstructured":"Jice Wang and Hongqi Wu. 2018. Android Inter-App Communication Threats Solutions and Challenges. https:\/\/arxiv.org\/abs\/1803.05039"},{"key":"e_1_3_2_1_64_1","first-page":"207","article-title":"Detecting User Activities with the Accelerometer on Android Smartphones","volume":"2","author":"Wang Xingfeng","year":"2015","unstructured":"Xingfeng Wang and Heecheol Kim. 2015. Detecting User Activities with the Accelerometer on Android Smartphones. Journal of Multimedia Information System 2, 2 (2015), 207--214.","journal-title":"Journal of Multimedia Information System"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243835"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173842"},{"key":"e_1_3_2_1_67_1","unstructured":"Davey Winder. 2024. New Google Play Store Warning-200 Dangerous Apps 8 Million Installs. https:\/\/www.forbes.com\/sites\/daveywinder\/2024\/10\/15\/new-google-play-store-warning-200-dangerous-apps-800-million-installs\/."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2897005"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","unstructured":"Shuochao Yao Shaohan Hu Yiran Zhao Aston Zhang and Tarek Abdelzaher. 2017. DeepSense: A Unified Deep Learning Framework for Time-Series Mobile Sensing Data Processing. In Proceedings of the 26th International Conference on World Wide Web (Perth Australia) (WWW '17). International World Wide Web Conferences Steering Committee Republic and Canton of Geneva CHE 351--360. doi:10.1145\/3038912.3052577","DOI":"10.1145\/3038912.3052577"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2808117.2808125"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278721.3278778"},{"key":"e_1_3_2_1_72_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Zimmeck Sebastian","year":"2017","unstructured":"Sebastian Zimmeck, Jie S Li, Hyungtae Kim, StevenMBellovin, and Tony Jebara. 2017. A Privacy Analysis of Cross-device Tracking. In 26th USENIX Security Symposium (USENIX Security 17). USENIX Association, Vancouver, BC, 1391--1408."},{"key":"e_1_3_2_1_73_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zufferey No\u00e9","year":"2023","unstructured":"No\u00e9 Zufferey, Mathias Humbert, Romain Tavenard, and K\u00e9vin Huguenin. 2023. Watch your Watch: Inferring Personality Traits from Wearable Activity Trackers. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 193--210."}],"event":{"name":"CODASPY '25: Fifteenth ACM Conference on Data and Application Security and Privacy","location":"Pittsburgh PA USA","acronym":"CODASPY '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3714393.3726508","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3714393.3726508","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T16:26:26Z","timestamp":1780417586000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3714393.3726508"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,19]]},"references-count":73,"alternative-id":["10.1145\/3714393.3726508","10.1145\/3714393"],"URL":"https:\/\/doi.org\/10.1145\/3714393.3726508","relation":{},"subject":[],"published":{"date-parts":[[2024,6,19]]},"assertion":[{"value":"2025-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}