{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T10:12:00Z","timestamp":1783764720645,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":51,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,12]],"date-time":"2026-04-12T00:00:00Z","timestamp":1775952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,12]]},"DOI":"10.1145\/3786583.3786912","type":"proceedings-article","created":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T09:12:14Z","timestamp":1783761134000},"page":"740-751","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["ViTAL: LLM-Powered Taint Analysis for GUI Field Visualization Auditing in Android"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-5338-7237","authenticated-orcid":false,"given":"Liuyang","family":"Jiang","sequence":"first","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8809-9400","authenticated-orcid":false,"given":"Shenghan","family":"Liu","sequence":"additional","affiliation":[{"name":"Douyin, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4680-4820","authenticated-orcid":false,"given":"Qiuping","family":"Yi","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6877-780X","authenticated-orcid":false,"given":"Hongliang","family":"Liang","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-7819-9203","authenticated-orcid":false,"given":"Xiangxing","family":"Qian","sequence":"additional","affiliation":[{"name":"Douyin, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-5202-2054","authenticated-orcid":false,"given":"Qingyun","family":"Kong","sequence":"additional","affiliation":[{"name":"Douyin, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9173-7651","authenticated-orcid":false,"given":"Yixiu","family":"Chen","sequence":"additional","affiliation":[{"name":"Douyin, ShangHai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9254-4512","authenticated-orcid":false,"given":"XiaoQiang","family":"Fan","sequence":"additional","affiliation":[{"name":"Douyin, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-5719-8781","authenticated-orcid":false,"given":"LiangXu","family":"Zou","sequence":"additional","affiliation":[{"name":"Douyin, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,11]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"John\u00a0Paul Hernandez. 2025. User-generated content (UGC): what it is and why it matters for your brand. https:\/\/sproutsocial.com\/insights\/user-generated-content-guide\/. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_3_2","unstructured":"Digital.gov. 2025. An introduction to content. https:\/\/digital.gov\/resources\/an-introduction-to-content. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_4_2","unstructured":"Wikipedia. 2022. User-generated content. https:\/\/en.wikipedia.org\/wiki\/User-generated_content#Criticism. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"crossref","unstructured":"Vaishali\u00a0U Gongane Mousami\u00a0V Munot and Alwin\u00a0D Anuse. 2022. Detection and moderation of detrimental content on social media platforms: current status and future directions. Social Network Analysis and Mining 12 1 (2022) 129.","DOI":"10.1007\/s13278-022-00951-3"},{"key":"e_1_3_3_2_6_2","doi-asserted-by":"crossref","unstructured":"Sarah Scheffler and Jonathan Mayer. 2023. SoK: Content Moderation for End-to-End Encryption. arxiv:https:\/\/arXiv.org\/abs\/2303.03979\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2303.03979","DOI":"10.56553\/popets-2023-0060"},{"key":"e_1_3_3_2_7_2","volume-title":"Media Industry: Booming Demand for Content Risk Control, Driven by In-house and Third-party Solutions","author":"Shi Kuang","year":"2019","unstructured":"Kuang Shi and Yang Aili. 2019. Media Industry: Booming Demand for Content Risk Control, Driven by In-house and Third-party Solutions. Technical Report. GF Securities Co., Ltd.Accessed: 2025-07-10."},{"key":"e_1_3_3_2_8_2","unstructured":"Wikipedia contributors. 2025. ByteDance. https:\/\/en.wikipedia.org\/wiki\/ByteDance. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_9_2","unstructured":"Yahoo News Singapore. 2018. Chinese regulator raps internet firms over vulgar content. https:\/\/sg.news.yahoo.com\/chinese-regulator-raps-internet-firms-over-vulgar-content-101045379\u2013finance.html. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_10_2","unstructured":"Edge Delta Team. 2024. Breaking Down The Numbers: How Much Data Does The World Create Daily in 2024? https:\/\/edgedelta.com\/company\/blog\/how-much-data-is-created-per-day. Accessed: 2025-07-10."},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236029"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/WCSE.2012.26"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616330"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","unstructured":"Severi Peltonen Luca Mezzalira and Davide Taibi. 2021. Motivations benefits and issues for adopting Micro-Frontends: A Multivocal Literature Review. Information and Software Technology 136 (2021) 106571. 10.1016\/j.infsof.2021.106571","DOI":"10.1016\/j.infsof.2021.106571"},{"key":"e_1_3_3_2_17_2","series-title":"(USENIX-SS\u201906)","volume-title":"Proceedings of the 15th Conference on USENIX Security Symposium - Volume 15","author":"Xu Wei","year":"2006","unstructured":"Wei Xu, Sandeep Bhatkar, and R. Sekar. 2006. Taint-enhanced policy enforcement: a practical approach to defeat a wide range of attacks. In Proceedings of the 15th Conference on USENIX Security Symposium - Volume 15 (Vancouver, B.C., Canada) (USENIX-SS\u201906). USENIX Association, USA, Article 9."},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","unstructured":"B. Chess and G. McGraw. 2004. Static analysis for security. IEEE Security & Privacy 2 6 (2004) 76\u201379. 10.1109\/MSP.2004.111","DOI":"10.1109\/MSP.2004.111"},{"key":"e_1_3_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.5555\/1251398.1251416"},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21902-4_17"},{"key":"e_1_3_3_2_21_2","unstructured":"OpenAI. 2024. GPT-4 Technical Report. arxiv:https:\/\/arXiv.org\/abs\/2303.08774\u00a0[cs.CL] https:\/\/arxiv.org\/abs\/2303.08774"},{"key":"e_1_3_3_2_22_2","unstructured":"Aaron Grattafiori and et al.2024. The Llama 3 Herd of Models. arxiv:https:\/\/arXiv.org\/abs\/2407.21783\u00a0[cs.AI] https:\/\/arxiv.org\/abs\/2407.21783"},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","unstructured":"Mark Weiser. 1984. Program Slicing. IEEE Transactions on Software Engineering SE-10 4 (1984) 352\u2013357. 10.1109\/TSE.1984.5010248","DOI":"10.1109\/TSE.1984.5010248"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/1640089.1640108"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","unstructured":"Neville Grech and Yannis Smaragdakis. 2017. P\/Taint: unified points-to and taint analysis. Proc. ACM Program. Lang. 1 OOPSLA Article 102 (Oct. 2017) 28\u00a0pages. 10.1145\/3133926","DOI":"10.1145\/3133926"},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.5555\/3295222.3295349"},{"key":"e_1_3_3_2_27_2","unstructured":"Tri Dao and Albert Gu. 2024. Transformers are SSMs: Generalized models and efficient algorithms through structured state space duality. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2405.21060 (2024)."},{"key":"e_1_3_3_2_28_2","unstructured":"Hanyu Duan Yi Yang and Kar\u00a0Yan Tam. 2024. Do LLMs Know about Hallucination? An Empirical Investigation of LLM\u2019s Hidden States. arxiv:https:\/\/arXiv.org\/abs\/2402.09733\u00a0[cs.CL] https:\/\/arxiv.org\/abs\/2402.09733"},{"key":"e_1_3_3_2_29_2","unstructured":"Jiaheng Wei Yuanshun Yao Jean-Francois Ton Hongyi Guo Andrew Estornell and Yang Liu. 2024. Measuring and Reducing LLM Hallucination without Gold-Standard Answers. arxiv:https:\/\/arXiv.org\/abs\/2402.10412\u00a0[cs.CL] https:\/\/arxiv.org\/abs\/2402.10412"},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"publisher","unstructured":"Lei Huang Weijiang Yu Weitao Ma Weihong Zhong Zhangyin Feng Haotian Wang Qianglong Chen Weihua Peng Xiaocheng Feng Bing Qin and Ting Liu. 2025. A Survey on Hallucination in Large Language Models: Principles Taxonomy Challenges and Open Questions. ACM Trans. Inf. Syst. 43 2 Article 42 (Jan. 2025) 55\u00a0pages. 10.1145\/3703155","DOI":"10.1145\/3703155"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.52202\/079017-3270"},{"key":"e_1_3_3_2_32_2","unstructured":"Shota Fujii and Rei Yamagishi. 2024. Feasibility Study for Supporting Static Malware Analysis Using LLM. arxiv:https:\/\/arXiv.org\/abs\/2411.14905\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2411.14905"},{"key":"e_1_3_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3613078"},{"key":"e_1_3_3_2_34_2","unstructured":"JetBrains. 2024. Coding conventions. https:\/\/kotlinlang.org\/docs\/coding-conventions.html#choose-good-names. Accessed on 2025-07-15."},{"key":"e_1_3_3_2_35_2","unstructured":"Google LLC. 2025. Kotlin style guide. https:\/\/developer.android.com\/kotlin\/style-guide?hl=zh-cn. Accessed on 2025-07-15."},{"key":"e_1_3_3_2_36_2","unstructured":"Oracle America Inc.2024. Java Naming Conventions. https:\/\/www.oracle.com\/java\/technologies\/javase\/codeconventions-namingconventions.html. Accessed on 2025-07-15."},{"key":"e_1_3_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3581388"},{"key":"e_1_3_3_2_38_2","unstructured":"Donghyun Lee and Mo Tiwari. 2024. Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems. arxiv:https:\/\/arXiv.org\/abs\/2410.07283\u00a0[cs.MA] https:\/\/arxiv.org\/abs\/2410.07283"},{"key":"e_1_3_3_2_39_2","unstructured":"Collin Zhang John\u00a0X. Morris and Vitaly Shmatikov. 2024. Extracting Prompts by Inverting LLM Outputs. arxiv:https:\/\/arXiv.org\/abs\/2405.15012\u00a0[cs.CL] https:\/\/arxiv.org\/abs\/2405.15012"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"publisher","unstructured":"Qianou Ma Weirui Peng Chenyang Yang Hua Shen Kenneth Koedinger and Tongshuang Wu. 2025. What Should We Engineer in Prompts? Training Humans in Requirement-Driven LLM Use. ACM Trans. Comput.-Hum. Interact. (April 2025). 10.1145\/3731756Just Accepted.","DOI":"10.1145\/3731756"},{"key":"e_1_3_3_2_41_2","first-page":"883","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","year":"2024","unstructured":"Asmita, Yaroslav Oliinyk, Michael Scott, Ryan Tsang, Chongzhou Fang, and Houman Homayoun. 2024. Fuzzing BusyBox: Leveraging LLM and Crash Reuse for Embedded Bug Unearthing. In 33rd USENIX Security Symposium (USENIX Security 24). USENIX Association, Philadelphia, PA, 883\u2013900. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/asmita"},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.108"},{"key":"e_1_3_3_2_43_2","series-title":"(NIPS \u201920)","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Brown Tom\u00a0B.","year":"2020","unstructured":"Tom\u00a0B. Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, Sandhini Agarwal, Ariel Herbert-Voss, Gretchen Krueger, Tom Henighan, Rewon Child, Aditya Ramesh, Daniel\u00a0M. Ziegler, Jeffrey Wu, Clemens Winter, Christopher Hesse, Mark Chen, Eric Sigler, Mateusz Litwin, Scott Gray, Benjamin Chess, Jack Clark, Christopher Berner, Sam McCandlish, Alec Radford, Ilya Sutskever, and Dario Amodei. 2020. Language models are few-shot learners. In Proceedings of the 34th International Conference on Neural Information Processing Systems (Vancouver, BC, Canada) (NIPS \u201920). Curran Associates Inc., Red Hook, NY, USA, Article 159, 25\u00a0pages."},{"key":"e_1_3_3_2_44_2","series-title":"(NIPS \u201922)","volume-title":"Proceedings of the 36th International Conference on Neural Information Processing Systems","author":"Wei Jason","year":"2024","unstructured":"Jason Wei, Xuezhi Wang, Dale Schuurmans, Maarten Bosma, Brian Ichter, Fei Xia, Ed\u00a0H. Chi, Quoc\u00a0V. Le, and Denny Zhou. 2024. Chain-of-thought prompting elicits reasoning in large language models. In Proceedings of the 36th International Conference on Neural Information Processing Systems (New Orleans, LA, USA) (NIPS \u201922). Curran Associates Inc., Red Hook, NY, USA, Article 1800, 14\u00a0pages."},{"key":"e_1_3_3_2_45_2","unstructured":"Zayne Sprague Fangcong Yin Juan\u00a0Diego Rodriguez Dongwei Jiang Manya Wadhwa Prasann Singhal Xinyu Zhao Xi Ye Kyle Mahowald and Greg Durrett. 2024. To cot or not to cot? chain-of-thought helps mainly on math and symbolic reasoning. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2409.12183 (2024)."},{"key":"e_1_3_3_2_46_2","volume-title":"Mariana Trench","year":"2021","unstructured":"Meta. 2021. Mariana Trench. https:\/\/github.com\/facebook\/mariana-trench?tab=readme-ov-file Accessed: 2025-09-01."},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1109\/WCSE.2012.26"},{"key":"e_1_3_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"publisher","unstructured":"William Enck Peter Gilbert Seungyeop Han Vasant Tendulkar Byung-Gon Chun Landon\u00a0P. Cox Jaeyeon Jung Patrick McDaniel and Anmol\u00a0N. Sheth. 2014. TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. ACM Trans. Comput. Syst. 32 2 Article 5 (June 2014) 29\u00a0pages. 10.1145\/2619091","DOI":"10.1145\/2619091"},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/3663529.3663824"},{"key":"e_1_3_3_2_51_2","doi-asserted-by":"publisher","unstructured":"Puzhuo Liu Chengnian Sun Yaowen Zheng Xuan Feng Chuan Qin Yuncheng Wang Zhenyang Xu Zhi Li Peng Di Yu Jiang and Limin Sun. 2025. LLM-Powered Static Binary Taint Analysis. ACM Trans. Softw. Eng. Methodol. 34 3 Article 83 (Feb. 2025) 36\u00a0pages. 10.1145\/3711816","DOI":"10.1145\/3711816"},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"publisher","unstructured":"Yuchen Ji Ting Dai Zhichao Zhou Yutian Tang and Jingzhu He. 2025. Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-procedural Path-Sensitive Taint Analysis. Proc. ACM Program. Lang. 9 OOPSLA1 Article 128 (April 2025) 29\u00a0pages. 10.1145\/3720488","DOI":"10.1145\/3720488"}],"event":{"name":"ICSE-SEIP '26: 2026 IEEE\/ACM 48th International Conference on Software Engineering","location":"Rio de Janeiro Brazil","acronym":"ICSE-SEIP '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the IEEE\/ACM 48th International Conference on Software Engineering: Software Engineering in Practice"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3786583.3786912","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T09:17:00Z","timestamp":1783761420000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3786583.3786912"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":51,"alternative-id":["10.1145\/3786583.3786912","10.1145\/3786583"],"URL":"https:\/\/doi.org\/10.1145\/3786583.3786912","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-07-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}