{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T16:00:16Z","timestamp":1787500816645,"version":"build-2736575974"},"reference-count":64,"publisher":"Association for Computing Machinery (ACM)","issue":"ISSTA","license":[{"start":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T00:00:00Z","timestamp":1750550400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2025,6,22]]},"abstract":"<jats:p>\n                    The Notification Listener Service (NLS) in Android allows third-party apps to monitor and process device notifications, enabling powerful features but also introducing security and privacy risks. Despite the special permission required to access NLS, it has been recurrently exploited by malicious actors. However, there is a lack of systematic investigation into NLS usage patterns and their security implications. In this paper, we propose\n                    <jats:sc>NLRadar<\/jats:sc>\n                    , a hybrid approach combining static analysis and LLM to examine NLS usage in Android apps. We apply\n                    <jats:sc>NLRadar<\/jats:sc>\n                    to a large scale of apps, including both malware and regular apps, to demystify NLS usage and to uncover abuses. Our analysis reveals that NLS is heavily abused, with interesting discoveries such as apps insecurely storing social media messages, exploiting NLS for destructive competition or SMS credential stealing, and leveraging NLS to spread promotional messages or even malicious links. We also find undisclosed changes in NLS usage through app updates and inadequate disclosure in privacy policies. Our findings emphasize the need for more rigorous vetting of NLS usage and better developer education on responsible NLS practices.\n                  <\/jats:p>","DOI":"10.1145\/3728898","type":"journal-article","created":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T10:52:56Z","timestamp":1750589576000},"page":"434-456","source":"Crossref","is-referenced-by-count":2,"title":["Walls Have Ears: Demystifying Notification Listener Usage in Android Apps"],"prefix":"10.1145","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-1876-9285","authenticated-orcid":false,"given":"Jiapeng","family":"Deng","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5216-933X","authenticated-orcid":false,"given":"Tianming","family":"Liu","sequence":"additional","affiliation":[{"name":"Monash University, Melbourne, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8793-5367","authenticated-orcid":false,"given":"Yanjie","family":"Zhao","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8117-0352","authenticated-orcid":false,"given":"Chao","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6642-2238","authenticated-orcid":false,"given":"Lin","family":"Zhang","sequence":"additional","affiliation":[{"name":"The National Computer Emergency Response Team\/Coordination Center of China (CNCERT\/CC), Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1100-8633","authenticated-orcid":false,"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,22]]},"reference":[{"key":"e_1_3_1_2_2","unstructured":"2019. Expanding target API level requirements in 2019. https:\/\/android-developers.googleblog.com\/2019\/02\/expanding-target-api-level-requirements.html."},{"key":"e_1_3_1_3_2","unstructured":"2019. Malware sidesteps Google policy with new 2FA bypass technique. https:\/\/www.welivesecurity.com\/2019\/06\/17\/malware-google-permissions-2fa-bypass\/."},{"key":"e_1_3_1_4_2","unstructured":"2021. Beware \u2014 A New Wormable Android Malware Spreading Through WhatsApp. https:\/\/thehackernews.com\/2021\/01\/beware-new-wormable-android-malware.html."},{"key":"e_1_3_1_5_2","unstructured":"2022. Android target API level requirements. https:\/\/seller.samsungapps.com\/notice\/getNoticeDetail.as?csNoticeID=0000007234."},{"key":"e_1_3_1_6_2","unstructured":"2023. Alien Android Banking Trojan Sidesteps 2FA | Threatpost. https:\/\/threatpost.com\/alien-android-2fa\/159517\/."},{"key":"e_1_3_1_7_2","unstructured":"2023. Promiscuous Permissions: Catching Your Android Apps in the Act | Keysight Blogs. https:\/\/www.keysight.com\/blogs\/en\/tech\/nwvs\/2023\/03\/24\/promiscuous-permissions-catching-your-android-apps-in-the-act."},{"key":"e_1_3_1_8_2","unstructured":"2023. Scoped Storage. https:\/\/source.android.com\/docs\/core\/storage\/scoped."},{"key":"e_1_3_1_9_2","unstructured":"2023. Sneaky DogeRAT Trojan Poses as Popular Apps Targets Indian Android Users. https:\/\/thehackernews.com\/2023\/05\/sneaky-dogerat-trojan-poses-as-popular.html."},{"key":"e_1_3_1_10_2","unstructured":"2023. Target API level requirements for Google Play apps. https:\/\/support.google.com\/googleplay\/android-developer\/answer\/11926878."},{"key":"e_1_3_1_11_2","unstructured":"2023. Technical analysis of SOVA android malware. https:\/\/muha2xmad.github.io\/malware-analysis\/sova\/."},{"key":"e_1_3_1_12_2","unstructured":"2024. BIND_NOTIFICATION_LISTENER_SERVICE | Manifest.permission | Android Developers. https:\/\/developer.android.com\/reference\/android\/Manifest.permission#BIND_NOTIFICATION_LISTENER_SERVICE."},{"key":"e_1_3_1_13_2","unstructured":"2024. Gift Offer Results APK (Android App) - Free Download. https:\/\/apkcombo.com\/gift-offer-results\/com.magis.app\/."},{"key":"e_1_3_1_14_2","unstructured":"2024. GPT-4o | OpenAI. https:\/\/openai.com\/index\/hello-gpt-4o\/."},{"key":"e_1_3_1_15_2","unstructured":"2024. Jelly Bean | Android Developers. https:\/\/developer.android.com\/about\/versions\/jelly-bean."},{"key":"e_1_3_1_16_2","unstructured":"2024. Market Distribution of the Regular App Dataset | NLRadar. https:\/\/github.com\/security-pride\/NLRadar\/tree\/master\/ApkInfo."},{"key":"e_1_3_1_17_2","unstructured":"2024. NotificationListenerService | Android Developers. https:\/\/developer.android.com\/reference\/android\/service\/notification\/NotificationListenerService."},{"key":"e_1_3_1_18_2","unstructured":"2024. Notifications overview | Android Developers. https:\/\/developer.android.com\/develop\/ui\/views\/notifications."},{"key":"e_1_3_1_19_2","unstructured":"2024. Prompting Questions for Assessing NLS Usage Security and Chain-of-thought Reasoning Example | NLRadar. https:\/\/github.com\/security-pride\/NLRadar\/tree\/master\/NLRadar\/LLM_Evaluation."},{"key":"e_1_3_1_20_2","unstructured":"2024. Save data in a local database using Room - Android Developers. https:\/\/developer.android.com\/training\/data-storage\/room."},{"key":"e_1_3_1_21_2","unstructured":"2024. SharedPreferences | Android Developers. https:\/\/developer.android.com\/training\/data-storage\/shared-preferences."},{"key":"e_1_3_1_22_2","unstructured":"2024. StatusBarNotification | Android Developers. https:\/\/developer.android.com\/reference\/android\/service\/notification\/StatusBarNotification."},{"key":"e_1_3_1_23_2","unstructured":"2024. Using Binder IPC | Android Open Source Project. https:\/\/source.android.com\/docs\/core\/architecture\/hidl\/binderipc."},{"key":"e_1_3_1_24_2","unstructured":"2025. Code Snippets of Identified NLS Abuse Examples | NLRadar. https:\/\/github.com\/security-pride\/NLRadar\/tree\/master\/NLRadar\/LLM_Evaluation\/Abuse_Example."},{"key":"e_1_3_1_25_2","unstructured":"2025. deepseek-ai\/DeepSeek-R1. https:\/\/github.com\/deepseek-ai\/DeepSeek-R1."},{"key":"e_1_3_1_26_2","unstructured":"2025. Fiddler B. https:\/\/www.telerik.com\/fiddler-b."},{"key":"e_1_3_1_27_2","unstructured":"2025. GitHub - skylot\/jadx: Dex to Java decompiler. https:\/\/github.com\/skylot\/jadx."},{"key":"e_1_3_1_28_2","unstructured":"2025. Intent | API reference | Android Developers. https:\/\/developer.android.com\/reference\/android\/content\/Intent."},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","unstructured":"Huda Abualola Hessa Alhawai Maha Kadadha Hadi Otrok and Azzam Mourad. 2016. An Android-based Trojan Spyware to study the notificationlistener service vulnerability. Procedia Computer Science 83 (2016) 465\u2013471. doi:10.1016\/J.PROCS.2016.04.210","DOI":"10.1016\/J.PROCS.2016.04.210"},{"key":"e_1_3_1_30_2","doi-asserted-by":"publisher","unstructured":"Mansour Ahmadi Battista Biggio Steven Arzt Davide Ariu and Giorgio Giacinto. 2016. Detecting misuse of google cloud messaging in android badware. In Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices. 103\u2013112. doi:10.1145\/2994459.2994469","DOI":"10.1145\/2994459.2994469"},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","unstructured":"Kevin Allix Tegawend\u00e9 F Bissyand\u00e9 Jacques Klein and Yves Le Traon. 2016. Androzoo: Collecting millions of android apps for the research community. In Proceedings of the 13th international conference on mining software repositories. 468\u2013471. doi:10.1145\/2901739.2903508","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","unstructured":"Steven Arzt Siegfried Rasthofer Christian Fritz Eric Bodden Alexandre Bartel Jacques Klein Yves Le Traon Damien Octeau and Patrick McDaniel. 2014. Flowdroid: Precise context flow field object-sensitive and lifecycle-aware taint analysis for android apps. ACM sigplan notices 49 6 (2014) 259\u2013269. doi:10.1145\/2666356.2594299","DOI":"10.1145\/2666356.2594299"},{"key":"e_1_3_1_33_2","doi-asserted-by":"publisher","unstructured":"Yangyi Chen Tongxin Li XiaoFeng Wang Kai Chen and Xinhui Han. 2015. Perplexed messengers from the cloud: Automated security analysis of push-messaging integrations. In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security . 1260\u20131272. doi:10.1145\/2810103.2813652","DOI":"10.1145\/2810103.2813652"},{"key":"e_1_3_1_34_2","doi-asserted-by":"publisher","unstructured":"Yongliang Chen Ruoqin Tang Chaoshun Zuo Xiaokuan Zhang Lei Xue Xiapu Luo and Qingchuan Zhao. 2024. Attention! Your Copied Data is Under Monitoring: A Systematic Study of Clipboard Usage in Android Apps. In Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1\u201313. doi:10.1145\/3597503.3623317","DOI":"10.1145\/3597503.3623317"},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","unstructured":"Kyle Denney A Selcuk Uluagac Kemal Akkaya and Shekhar Bhansali. 2016. A novel storage covert channel on wearable devices using status bar notifications. In 2016 13th IEEE Annual Consumer Communications & Networking Conference (CCNC). IEEE 845\u2013848. doi:10.1109\/CCNC.2016.7444898","DOI":"10.1109\/CCNC.2016.7444898"},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","unstructured":"Kyle Denney A Selcuk Uluagac Hidayet Aksu and Kemal Akkaya. 2018. An Android-Based Covert Channel Framework on Wearables Using Status Bar Notifications. Versatile Cybersecurity (2018) 1\u201317. doi:10.1007\/978-3-319-97643-3_1","DOI":"10.1007\/978-3-319-97643-3_1"},{"key":"e_1_3_1_37_2","unstructured":"Wenrui Diao Yue Zhang Li Zhang Zhou Li Fenghao Xu Xiaorui Pan Xiangyu Liu Jian Weng Kehuan Zhang and XiaoFeng Wang. 2019. Kindness is a Risky Business: On the Usage of the Accessibility {APIs} in Android. In 22nd International Symposium on Research in Attacks Intrusions and Defenses (RAID 2019). 261\u2013275."},{"key":"e_1_3_1_38_2","unstructured":"Zikan Dong Tianming Liu Jiapeng Deng Li Li Minghui Yang Meng Wang Guosheng Xu and Guoai Xu. 2024. Exploring Covert Third-party Identifiers through External Storage in the Android New Era. In 33rd USENIX Security Symposium (USENIX Security 24). 4535\u20134552."},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","unstructured":"Xinyi Hou Yanjie Zhao Yue Liu Zhou Yang Kailong Wang Li Li Xiapu Luo David Lo John Grundy and Haoyu Wang. 2024. Large language models for software engineering: A systematic literature review. ACM Transactions on Software Engineering and Methodology 33 8 (2024) 1\u201379. doi:10.1145\/3695988","DOI":"10.1145\/3695988"},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","unstructured":"Sangwon Hyun Junsung Cho Geumhwan Cho and Hyoungshick Kim. 2018. Design and Analysis of Push Notification-Based Malware on Android. Security and Communication Networks 2018 1 (2018) 8510256. doi:10.1155\/2018\/8510256","DOI":"10.1155\/2018\/8510256"},{"key":"e_1_3_1_41_2","doi-asserted-by":"publisher","unstructured":"Yeongjin Jang Chengyu Song Simon P Chung Tielei Wang and Wenke Lee. 2014. A11y attacks: Exploiting accessibility in operating systems. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. 103\u2013115. doi:10.1145\/2660267.2660295","DOI":"10.1145\/2660267.2660295"},{"key":"e_1_3_1_42_2","doi-asserted-by":"publisher","unstructured":"Hayoung Lee Taeho Kang Sangho Lee Jong Kim and Yoonho Kim. 2014. Punobot: Mobile botnet using push notification service in android. In Information Security Applications: 14th International Workshop WISA 2013 Jeju Island Korea August 19-21 2013 Revised Selected Papers 14. Springer 124\u2013137. doi:10.1007\/978-3-319-05149-9_8","DOI":"10.1007\/978-3-319-05149-9_8"},{"key":"e_1_3_1_43_2","doi-asserted-by":"publisher","unstructured":"Li Li Alexandre Bartel Tegawend\u00e9 F Bissyand\u00e9 Jacques Klein Yves Le Traon Steven Arzt Siegfried Rasthofer Eric Bodden Damien Octeau and Patrick McDaniel. 2015. Iccta: Detecting inter-component privacy leaks in android apps. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering Vol. 1. IEEE 280\u2013291. doi:10.1109\/ICSE.2015.48","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_1_44_2","doi-asserted-by":"publisher","unstructured":"Li Li Tegawend\u00e9 F Bissyand\u00e9 Damien Octeau and Jacques Klein. 2016. Reflection-Aware Static Analysis of Android Apps. In The 31st IEEE\/ACM International Conference on Automated Software Engineering Demo Track (ASE 2016). doi:10.1145\/2970276.2970277","DOI":"10.1145\/2970276.2970277"},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","unstructured":"Tongxin Li Xiaoyong Zhou Luyi Xing Yeonjoon Lee Muhammad Naveed XiaoFeng Wang and Xinhui Han. 2014. Mayhem in the push clouds: Understanding and mitigating security hazards in mobile push-messaging services. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. 978\u2013989. doi:10.1145\/2660267.2660302","DOI":"10.1145\/2660267.2660302"},{"key":"e_1_3_1_46_2","doi-asserted-by":"publisher","unstructured":"Keke Lian Lei Zhang Guangliang Yang Shuo Mao Xinjie Wang Yuan Zhang and Min Yang. 2024. Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. Proceedings of the ACM on Software Engineering 1 FSE (2024) 70\u201391. doi:10.1145\/3643730","DOI":"10.1145\/3643730"},{"key":"e_1_3_1_47_2","doi-asserted-by":"publisher","unstructured":"Tianming Liu Haoyu Wang Li Li Guangdong Bai Yao Guo and Guoai Xu. 2019. Dapanda: Detecting aggressive push notifications in android apps. In 2019 34th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE 66\u201378. doi:10.1109\/ASE.2019.00017","DOI":"10.1109\/ASE.2019.00017"},{"key":"e_1_3_1_48_2","doi-asserted-by":"publisher","unstructured":"Jiadong Lou Xiaohan Zhang Yihe Zhang Xinghua Li Xu Yuan and Ning Zhang. 2023. Devils in Your Apps: Vulnerabilities and User Privacy Exposure in Mobile Notification Systems. In 2023 53rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). IEEE 28\u201341. doi:10.1109\/DSN58367.2023.00017","DOI":"10.1109\/DSN58367.2023.00017"},{"key":"e_1_3_1_49_2","unstructured":"Allan Lyons Julien Gamba Austin Shawaga Joel Reardon Juan Tapiador Serge Egelman and Narseo Vallina-Rodr\u00edguez. 2023. Log:{It\u2019s} Big {It\u2019s} Heavy {It\u2019s} Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem. In 32nd USENIX Security Symposium (USENIX Security 23). 2115\u20132132."},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","unstructured":"Daye Nam Andrew Macvean Vincent Hellendoorn Bogdan Vasilescu and Brad Myers. 2024. Using an llm to help with code understanding. In Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering. 1\u201313. doi:10.1145\/3597503.3639187","DOI":"10.1145\/3597503.3639187"},{"key":"e_1_3_1_51_2","doi-asserted-by":"publisher","unstructured":"Mohammad Naseri Nataniel P Borges Jr Andreas Zeller and Romain Rouvoy. 2019. Accessileaks: Investigating privacy leaks exposed by the android accessibility service. In PETS 2019-The 19th Privacy Enhancing Technologies Symposium. doi:10.2478\/popets-2019-0031","DOI":"10.2478\/popets-2019-0031"},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","unstructured":"Thomas Neteler Sascha Fahl and Luigi Lo Iacono. 2024. \u201cYou received $100 000 from Johnny\u201d: A Mixed-Methods Study on Push Notification Security and Privacy in Android Apps. IEEE Access (2024). doi:10.1109\/ACCESS.2024.3439095","DOI":"10.1109\/ACCESS.2024.3439095"},{"key":"e_1_3_1_53_2","doi-asserted-by":"publisher","unstructured":"Siegfried Rasthofer Steven Arzt and Eric Bodden. 2014. A machine-learning approach for classifying and categorizing android sources and sinks. In NDSS Vol. 14. 1125. doi:10.14722\/ndss.2014.23039","DOI":"10.14722\/ndss.2014.23039"},{"key":"e_1_3_1_54_2","doi-asserted-by":"publisher","unstructured":"Nikita Samarin Alex Sanchez Trinity Chung Akshay Dan Bhavish Juleemun Conor Gilsenan Nick Merrill Joel Reardon and Serge Egelman. [n. d.]. The Medium is the Message: How Secure Messaging Apps Leak Sensitive Data to Push Notification Services. Proceedings on Privacy Enhancing Technologies 2024 4 ([n. d.]). doi:10.56553\/popets-2024-0151","DOI":"10.56553\/popets-2024-0151"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","unstructured":"Xiaoyu Sun Li Li Tegawend\u00e9 F Bissyand\u00e9 Jacques Klein Damien Octeau and John Grundy. 2020. Taming Reflection: An Essential Step Towards Whole-Program Analysis of Android Apps. ACM Transactions on Software Engineering and Methodology (TOSEM) (2020). doi:10.1145\/3440033","DOI":"10.1145\/3440033"},{"key":"e_1_3_1_56_2","doi-asserted-by":"publisher","unstructured":"Xiaoyu Tan Yongxin Deng Xihe Qiu Weidi Xu Chao Qu Wei Chu Yinghui Xu and Yuan Qi. 2024. Thought-Like-Pro: Enhancing Reasoning of Large Language Models through Self-Driven Prolog-based Chain-of-Though. arXiv preprint arXiv:2407.14562 (2024). doi:10.48550\/arXiv.2407.14562","DOI":"10.48550\/arXiv.2407.14562"},{"key":"e_1_3_1_57_2","doi-asserted-by":"publisher","unstructured":"Raja Vall\u00e9e-Rai Phong Co Etienne Gagnon Laurie Hendren Patrick Lam and Vijay Sundaresan. 2010. Soot: A Java bytecode optimization framework. In CASCON First Decade High Impact Papers. 214\u2013224. doi:10.1145\/1925805.1925818","DOI":"10.1145\/1925805.1925818"},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","unstructured":"Liu Wang Haoyu Wang Ren He Ran Tao Guozhu Meng Xiapu Luo and Xuanzhe Liu. 2022. MalRadar: Demystifying android malware in the new era. Proceedings of the ACM on Measurement and Analysis of Computing Systems 6 2 (2022) 1\u201327. doi:10.1145\/3530906","DOI":"10.1145\/3530906"},{"key":"e_1_3_1_59_2","doi-asserted-by":"publisher","unstructured":"Yaqing Wang Quanming Yao James T Kwok and Lionel M Ni. 2020. Generalizing from a few examples: A survey on few-shot learning. ACM computing surveys (csur) 53 3 (2020) 1\u201334. doi:10.1145\/3386252","DOI":"10.1145\/3386252"},{"key":"e_1_3_1_60_2","doi-asserted-by":"crossref","unstructured":"Jason Wei Xuezhi Wang Dale Schuurmans Maarten Bosma Fei Xia Ed Chi Quoc V Le Denny Zhou et al. 2022. Chain-of-thought prompting elicits reasoning in large language models. Advances in neural information processing systems 35 (2022) 24824\u201324837.","DOI":"10.52202\/068431-1800"},{"key":"e_1_3_1_61_2","doi-asserted-by":"publisher","unstructured":"Lili Wei Yepang Liu and Shing-Chi Cheung. 2016. Taming android fragmentation: Characterizing and detecting compatibility issues for android apps. In Proceedings of the 31st IEEE\/ACM international conference on automated software engineering. 226\u2013237. doi:10.1145\/2970276.2970312","DOI":"10.1145\/2970276.2970312"},{"key":"e_1_3_1_62_2","doi-asserted-by":"publisher","unstructured":"HanXiang Xu ShenAo Wang Ningke Li Yanjie Zhao Kai Chen Kailong Wang Yang Liu Ting Yu and HaoYu Wang. 2024. Large language models for cyber security: A systematic literature review. arXiv preprint arXiv:2405.04760 (2024). doi:10.48550\/arXiv.2405.04760","DOI":"10.48550\/arXiv.2405.04760"},{"key":"e_1_3_1_63_2","doi-asserted-by":"publisher","unstructured":"Jiwei Yan Shixin Zhang Yepang Liu Jun Yan and Jian Zhang. 2022. Iccbot: fragment-aware and context-sensitive icc resolution for android applications. In Proceedings of the ACM\/IEEE 44th International Conference on Software Engineering: Companion Proceedings. 105\u2013109. doi:10.1145\/3510454.3516864","DOI":"10.1145\/3510454.3516864"},{"key":"e_1_3_1_64_2","doi-asserted-by":"publisher","unstructured":"Qingchuan Zhao Chaoshun Zuo Brendan Dolan-Gavitt Giancarlo Pellegrino and Zhiqiang Lin. 2020. Automatic uncovering of hidden behaviors from input validation in mobile apps. In 2020 IEEE Symposium on Security and Privacy (SP). IEEE 1106\u20131120. doi:10.1109\/SP40000.2020.00072","DOI":"10.1109\/SP40000.2020.00072"},{"key":"e_1_3_1_65_2","doi-asserted-by":"publisher","unstructured":"Hao Zhou Xiapu Luo Haoyu Wang and Haipeng Cai. 2022. Uncovering Intent based Leak of Sensitive Data in Android Framework. In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security. 3239\u20133252. doi:10.1145\/3548606.3560601","DOI":"10.1145\/3548606.3560601"}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3728898","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T13:49:30Z","timestamp":1787492970000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3728898"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,22]]},"references-count":64,"journal-issue":{"issue":"ISSTA","published-print":{"date-parts":[[2025,6,22]]}},"alternative-id":["10.1145\/3728898"],"URL":"https:\/\/doi.org\/10.1145\/3728898","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,22]]}}}