{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T22:14:54Z","timestamp":1766441694023,"version":"3.48.0"},"publisher-location":"New York, NY, USA","reference-count":74,"publisher":"ACM","funder":[{"name":"IITP, KISA","award":["RS-2022-0-00563, RS-2022-IS000002, RS-2024-00341722, RS-2024-00341722, RS-2024-00437306, RS-2021-II211817, IITP-2025-RS-2020-II201819"],"award-info":[{"award-number":["RS-2022-0-00563, RS-2022-IS000002, RS-2024-00341722, RS-2024-00341722, RS-2024-00437306, RS-2021-II211817, IITP-2025-RS-2020-II201819"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,11,19]]},"DOI":"10.1145\/3719027.3744858","type":"proceedings-article","created":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T23:32:38Z","timestamp":1763854358000},"page":"1529-1543","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Intent-aware Fuzzing for Android Hardened Application"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-1177-285X","authenticated-orcid":false,"given":"Seongyun","family":"Jeong","sequence":"first","affiliation":[{"name":"UNIST, Ulsan, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8478-5658","authenticated-orcid":false,"given":"Minseong","family":"Choi","sequence":"additional","affiliation":[{"name":"UNIST, Ulsan, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5344-5252","authenticated-orcid":false,"given":"Haehyun","family":"Cho","sequence":"additional","affiliation":[{"name":"Soongsil University, Seoul, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5658-6050","authenticated-orcid":false,"given":"Seokwoo","family":"Choi","sequence":"additional","affiliation":[{"name":"The Affiliated Institute of ETRI, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-4201-4086","authenticated-orcid":false,"given":"Hyungsub","family":"Kim","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, Indiana, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9461-6652","authenticated-orcid":false,"given":"Yuseok","family":"Jeon","sequence":"additional","affiliation":[{"name":"Korea University, Seoul, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,11,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Accessed","author":"Qihoo","year":"2025","unstructured":"Qihoo 360. Products and Services, Accessed: Jan. 10, 2025. http:\/\/www.360.cn\/about\/englishversion.html."},{"key":"e_1_3_2_1_2_1","volume-title":"Bpfroid: Robust real time android malware detection framework. arXiv preprint arXiv:2105.14344","author":"Agman Yaniv","year":"2021","unstructured":"Yaniv Agman and Danny Hendler. Bpfroid: Robust real time android malware detection framework. arXiv preprint arXiv:2105.14344, 2021."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616330"},{"key":"e_1_3_2_1_4_1","volume-title":"Accessed","author":"Anand Saswat","year":"2025","unstructured":"Saswat Anand. ELLA: A Tool for Binary Instrumentation of Android Apps, Accessed: Jan. 10, 2025. https:\/\/github.com\/saswatanand\/ella."},{"key":"e_1_3_2_1_5_1","volume-title":"Damien Octeau, and Patrick McDaniel. Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. ACM sigplan notices, 49(6):259-269","author":"Arzt Steven","year":"2014","unstructured":"Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick McDaniel. Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. ACM sigplan notices, 49(6):259-269, 2014."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICST57152.2023.00013"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.43"},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_8_1","unstructured":"backlinko. iPhone vs Android Statistics, Accessed: Jan. 10, 2025. https:\/\/backlinko.com\/iphone-vs-android-statistics."},{"volume-title":"Baidu","year":"2025","key":"e_1_3_2_1_9_1","unstructured":"Baidu. Baidu, Accessed: Jan. 10, 2025. https:\/\/app.baidu.com."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_10_1","unstructured":"bankmycell. How many apps in google play store? (2024), Accessed: Jan. 10, 2025. https:\/\/www.bankmycell.com\/blog\/number-of-google-play-store-apps\/."},{"key":"e_1_3_2_1_11_1","volume-title":"29th Annual FIRST Conference","author":"Besler Frederic","year":"2017","unstructured":"Frederic Besler, Carsten Willems, and Ralf Hund. Countering innovative sandbox evasion techniques used by malware. In 29th Annual FIRST Conference, 2017."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510161"},{"issue":"9","key":"e_1_3_2_1_13_1","article-title":"A practical intent fuzzing tool for robustness of inter-component communication in android apps","volume":"12","author":"Choi Kwanghoon","year":"2018","unstructured":"Kwanghoon Choi, Myungpil Ko, and Byeong-Mo Chang. A practical intent fuzzing tool for robustness of inter-component communication in android apps. KSII Transactions on Internet & Information Systems, 12(9), 2018.","journal-title":"KSII Transactions on Internet & Information Systems"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-65175-5_6"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23465"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01701-9_10"},{"key":"e_1_3_2_1_17_1","first-page":"4535","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Dong Zikan","year":"2024","unstructured":"Zikan Dong, Tianming Liu, Jiapeng Deng, Li Li, Minghui Yang, Meng Wang, Guosheng Xu, and Guoai Xu. Exploring covert third-party identifiers through external storage in the android new era. In 33rd USENIX Security Symposium (USENIX Security 24), pages 4535-4552, 2024."},{"key":"e_1_3_2_1_18_1","volume-title":"Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones","author":"Enck William","year":"2014","unstructured":"William Enck, Peter Gilbert, Seungyeop Han, Vasant Tendulkar, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N. Sheth. Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones. volume 32, June 2014."},{"volume-title":"facebookexperimental","year":"2025","key":"e_1_3_2_1_19_1","unstructured":"ExtendedAndroidTools. facebookexperimental, Accessed: Jan. 10, 2025. https:\/\/github.com\/facebookexperimental\/ExtendedAndroidTools."},{"volume-title":"CodeQL","year":"2025","key":"e_1_3_2_1_20_1","unstructured":"Github. CodeQL, Accessed: Jan. 10, 2025. https:\/\/codeql.github.com\/."},{"volume-title":"Bundle","year":"2025","key":"e_1_3_2_1_21_1","unstructured":"Google. Bundle, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/reference\/android\/os\/Bundle."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_22_1","unstructured":"Google. Extending the Kernel with eBPF, Accessed: Jan. 10, 2025. https:\/\/source.android.com\/docs\/core\/architecture\/kernel\/bpf."},{"key":"e_1_3_2_1_23_1","volume-title":"Accessed","author":"Flutter","year":"2025","unstructured":"Google. Flutter - Build for any screen, Accessed: Jan. 10, 2025. https:\/\/flutter.dev."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_24_1","unstructured":"Google. Intents and intent filters, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/guide\/components\/intents-filters."},{"volume-title":"NDK","year":"2025","key":"e_1_3_2_1_25_1","unstructured":"Google. NDK, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/ndk."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_26_1","unstructured":"google. Play Integrity API, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/google\/play\/integrity."},{"volume-title":"Schedule alarms","year":"2025","key":"e_1_3_2_1_27_1","unstructured":"Google. Schedule alarms, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/develop\/background-work\/services\/alarms\/schedule."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_28_1","unstructured":"Google. Shrink, obfuscate, and optimize your app, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/build\/shrink-code."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_29_1","unstructured":"Google. Start the emulator from the command line, Accessed: Jan. 10, 2025. https:\/\/developer.android.com\/studio\/run\/emulator-commandline."},{"key":"e_1_3_2_1_30_1","unstructured":"Google. UI\/Application Exerciser Monkey Accessed: Jan. 10 2025. https:\/\/developer.android.com\/studio\/test\/other-testing-tools\/monkey."},{"volume-title":"Android 12 features and changes list","year":"2025","key":"e_1_3_2_1_31_1","unstructured":"Google. Android 12 features and changes list, Accessed: May. 5, 2025. https:\/\/developer.android.com\/about\/versions\/12\/summary."},{"volume-title":"Android 13 features and changes list","year":"2025","key":"e_1_3_2_1_32_1","unstructured":"Google. Android 13 features and changes list, Accessed: May. 5, 2025. https:\/\/developer.android.com\/about\/versions\/13\/summary."},{"volume-title":"DexGuard","year":"2025","key":"e_1_3_2_1_33_1","unstructured":"Google. DexGuard, Accessed: May. 5, 2025. https:\/\/source.android.com\/docs\/core\/runtime\/jit-compiler."},{"volume-title":"File-based encryption","year":"2025","key":"e_1_3_2_1_34_1","unstructured":"Google. File-based encryption, Accessed: May. 5, 2025. https:\/\/source.android.com\/docs\/security\/features\/encryption\/file-based."},{"volume-title":"Log Info Disclosure","year":"2025","key":"e_1_3_2_1_35_1","unstructured":"Google. Log Info Disclosure, Accessed: May. 5, 2025. https:\/\/developer.android.com\/privacy-and-security\/risks\/log-info-disclosure."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00042"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00027"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE59848.2023.00032"},{"key":"e_1_3_2_1_39_1","first-page":"69","volume-title":"DIMVA 2018","author":"Haupert Vincent","year":"2018","unstructured":"Vincent Haupert, Dominik Maier, Nicolas Schneider, Julian Kirsch, and Tilo M\u00fcller. Honey, i shrunk your app security: The state of android app hardening. In Detection of Intrusions and Malware, and Vulnerability Assessment: 15th International Conference, DIMVA 2018, pages 69-91. Springer, 2018."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771800"},{"volume-title":"Ijiami","year":"2025","key":"e_1_3_2_1_41_1","unstructured":"Ijiami. Ijiami, Accessed: Jan. 10, 2025. https:\/\/www.ijiami.cn."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3240724"},{"key":"e_1_3_2_1_43_1","volume-title":"Accessed","author":"Intelligence Satori Threat","year":"2025","unstructured":"Satori Threat Intelligence and Research Team. TERRACOTTA Android Malware: A Technical Study, Accessed: Jan. 10, 2025. https:\/\/www.humansecurity.com\/learn\/blog\/terracotta-android-malware-a-technical-study."},{"volume-title":"bcc","year":"2025","key":"e_1_3_2_1_44_1","unstructured":"iovisor. bcc, Accessed: Jan. 10, 2025. https:\/\/github.com\/iovisor\/bcc."},{"volume-title":"Jiagu","year":"2025","key":"e_1_3_2_1_45_1","unstructured":"Jiagu. Jiagu, Accessed: Jan. 10, 2025. https:\/\/jiagu.360.cn."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407052"},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_47_1","unstructured":"Licle. DexProtector: Multi-layered RASP solution that secures your Android and iOS apps against static and dynamic analysis, illegal use and tampering, Accessed: Jan. 10, 2025. https:\/\/dexprotector.com."},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_48_1","unstructured":"Microsoft. What is Xamarin?, Accessed: Jan. 10, 2025. https:\/\/learn.microsoft.com\/previous-versions\/xamarin\/get-started\/what-is-xamarin."},{"volume-title":"Obfuscapk","year":"2025","key":"e_1_3_2_1_49_1","unstructured":"Mobile-IoT-Security-Lab. Obfuscapk, Accessed: Jan. 10, 2025. https:\/\/github.com\/Mobile-IoT-Security-Lab\/Obfuscapk."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297663.3309677"},{"key":"e_1_3_2_1_51_1","volume-title":"Accessed","author":"OWASP.","year":"2025","unstructured":"OWASP. Android Anti-Reversing Defenses, Accessed: Jan. 10, 2025. https:\/\/github.com\/OWASP\/owasp-mastg\/blob\/master\/Document\/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md."},{"key":"e_1_3_2_1_52_1","volume-title":"Fine-grained code coverage measurement in automated black-box android testing. ACM Trans. Softw. Eng. Methodol., 29(4), jul","author":"Pilgun Aleksandr","year":"2020","unstructured":"Aleksandr Pilgun, Olga Gadyatskaya, Yury Zhauniarovich, Stanislav Dashevskyi, Artsiom Kushniarou, and Sjouke Mauw. Fine-grained code coverage measurement in automated black-box android testing. ACM Trans. Softw. Eng. Methodol., 29(4), jul 2020."},{"key":"e_1_3_2_1_53_1","volume-title":"React Native","author":"Platforms Meta","year":"2025","unstructured":"Meta Platforms. React Native, Accessed: Jan. 10, 2025. https:\/\/reactnative.dev."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"crossref","unstructured":"Bradley Reaves Jasmine Bowers Sigmund Albert Gorski III Olabode Anise Rahul Bobhate Raymond Cho Hiranava Das Sharique Hussain Hamza Karachiwala Nolen Scaife Byron Wright Kevin Butler William Enck and Patrick Traynor. *droid: Assessment and evaluation of android application analysis tools. ACM Comput. Surv. 49(3) oct 2016.","DOI":"10.1145\/2996358"},{"volume-title":"Accessed","year":"2025","key":"e_1_3_2_1_55_1","unstructured":"rednaga. APKiD: Fast Identification of Mobile RASP SDKs, Accessed: Jan. 10, 2025. https:\/\/github.com\/rednaga\/APKiD."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICST49551.2021.00053"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2632168.2632169"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106298"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978343"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"volume-title":"Tencent Cloud","year":"2025","key":"e_1_3_2_1_61_1","unstructured":"Tencent. Tencent Cloud, Accessed: Jan. 10, 2025. https:\/\/www.tencentcloud.com."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2866347"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2020.2996433"},{"key":"e_1_3_2_1_64_1","first-page":"289","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Xue Lei","year":"2017","unstructured":"Lei Xue, Yajin Zhou, Ting Chen, Xiapu Luo, and Guofei Gu. Malton: Towards {On-Device}{Non-Invasive} mobile malware analysis for {ART}. In 26th USENIX Security Symposium (USENIX Security 17), pages 289-306, 2017."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion55297.2022.9793791"},{"key":"e_1_3_2_1_66_1","first-page":"569","volume-title":"21st USENIX security symposium (USENIX security 12)","author":"Yan Lok Kwong","year":"2012","unstructured":"Lok Kwong Yan and Heng Yin. {DroidScope}: Seamlessly reconstructing the {OS} and dalvik semantic views for dynamic android malware analysis. In 21st USENIX security symposium (USENIX security 12), pages 569-584, 2012."},{"key":"e_1_3_2_1_67_1","first-page":"536","volume-title":"Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, ASIA CCS '14","author":"Yang Kun","year":"2014","unstructured":"Kun Yang, Jianwei Zhuge, Yongke Wang, Lujue Zhou, and Haixin Duan. Intentfuzzer: detecting capability leaks of android applications. In Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, ASIA CCS '14, page 531\u2013536, 2014."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_17"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833764"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2536853.2536881"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00040"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24177-7_15"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534410"},{"key":"e_1_3_2_1_74_1","first-page":"1391","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Zimmeck Sebastian","year":"2017","unstructured":"Sebastian Zimmeck, Jie S Li, Hyungtae Kim, Steven M Bellovin, and Tony Jebara. A privacy analysis of cross-device tracking. In 26th USENIX Security Symposium (USENIX Security 17), pages 1391-1408, 2017."}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Taipei Taiwan","acronym":"CCS '25"},"container-title":["Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719027.3744858","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T22:10:33Z","timestamp":1766441433000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3719027.3744858"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,19]]},"references-count":74,"alternative-id":["10.1145\/3719027.3744858","10.1145\/3719027"],"URL":"https:\/\/doi.org\/10.1145\/3719027.3744858","relation":{},"subject":[],"published":{"date-parts":[[2025,11,19]]},"assertion":[{"value":"2025-11-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}