{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T17:06:59Z","timestamp":1784653619829,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,12]],"date-time":"2026-04-12T00:00:00Z","timestamp":1775952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Fundamental Research Funds for the Central Universities","award":["226-2025-00171"],"award-info":[{"award-number":["226-2025-00171"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,12]]},"DOI":"10.1145\/3793655.3793721","type":"proceedings-article","created":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T16:04:46Z","timestamp":1784649886000},"page":"160-171","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["PIChecker: Automatic Privacy Detector for Third Party Libraries in Android Apps"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-7396-5027","authenticated-orcid":false,"given":"Kerui","family":"Huang","sequence":"first","affiliation":[{"name":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9814-5977","authenticated-orcid":false,"given":"Xian","family":"Zhan","sequence":"additional","affiliation":[{"name":"Huawei, Shenzhen, Guangdong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6302-3256","authenticated-orcid":false,"given":"Xin","family":"Xia","sequence":"additional","affiliation":[{"name":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, Zhejiang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,21]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"2018. PDPA - Personal Data Protection Act of Singapore. https:\/\/www.pdpc.gov.sg\/Overview-of-PDPA\/The-Legislation\/Personal-Data-Protection-Act"},{"key":"e_1_3_3_1_3_2","unstructured":"2020. LGPD - Brazilian General Data Protection Law. https:\/\/www.gov.br\/cidadania\/pt-br\/acesso-a-informacao\/lgpd"},{"key":"e_1_3_3_1_4_2","unstructured":"2021. PDL - Russian Personal Data Law. http:\/\/publication.pravo.gov.ru\/Document\/View\/0001202012300044"},{"key":"e_1_3_3_1_5_2","first-page":"585","volume-title":"28th USENIX security symposium (USENIX security 19)","author":"Andow Benjamin","year":"2019","unstructured":"Benjamin Andow, Samin\u00a0Yaseer Mahmud, Wenyu Wang, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Tao Xie. 2019. { PolicyLint} : investigating internal privacy policy contradictions on google play. In 28th USENIX security symposium (USENIX security 19). 585\u2013602."},{"key":"e_1_3_3_1_6_2","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security\u201920)","author":"Andow Benjami","year":"2020","unstructured":"Benjami Andow, Samin\u00a0Yaseer Mahmud, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Serge Egelman. 2020. Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with policheck. In Proceedings of the 29th USENIX Security Symposium (USENIX Security\u201920)."},{"key":"e_1_3_3_1_7_2","unstructured":"AppBrain. 2024. AppBrain - Discover the Best Android Apps and Games. https:\/\/www.appbrain.com\/."},{"key":"e_1_3_3_1_8_2","unstructured":"AppBrain. 2024. Detail Page of Unity Ads library. https:\/\/www.appbrain.com\/stats\/libraries\/details\/unity_ads\/unity-ads."},{"key":"e_1_3_3_1_9_2","unstructured":"Steven Arzt Siegfried Rasthofer and Eric Bodden. 2013. Susi: A tool for the fully automated classification and categorization of android sources and sinks. University of Darmstadt Tech. Rep. TUDCS-2013-0114 (2013)."},{"key":"e_1_3_3_1_10_2","doi-asserted-by":"crossref","unstructured":"Steven Arzt Siegfried Rasthofer Christian Fritz Eric Bodden Alexandre Bartel Jacques Klein Yves Le\u00a0Traon Damien Octeau and Patrick McDaniel. 2014. Flowdroid: Precise context flow field object-sensitive and lifecycle-aware taint analysis for android apps. Acm Sigplan Notices 49 6 (2014) 259\u2013269.","DOI":"10.1145\/2666356.2594299"},{"key":"e_1_3_3_1_11_2","unstructured":"Automated Software Engineering Conference. 2023. ASE 2023 Industry Challenge. https:\/\/conf.researchr.org\/track\/ase-2023\/ase-2023-industry-challenge."},{"key":"e_1_3_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978333"},{"key":"e_1_3_3_1_13_2","first-page":"1021","volume-title":"23rd { USENIX} Security Symposium ({ USENIX} Security 14)","author":"Bhoraskar Ravi","year":"2014","unstructured":"Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Jaeyeon Jung, Suman Nath, Rui Wang, and David Wetherall. 2014. Brahmastra: Driving apps to test the security of third-party components. In 23rd { USENIX} Security Symposium ({ USENIX} Security 14). 1021\u20131036."},{"key":"e_1_3_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.2307\/j.ctvjghvnn"},{"key":"e_1_3_3_1_15_2","unstructured":"California State Legislature. 2018. California Consumer Privacy Act of 2018. https:\/\/leginfo.legislature.ca.gov\/faces\/codes_displayText.xhtml?lawCode=CIV&division=3.&title=1.81.5.&part=4.&chapter=&article=."},{"key":"e_1_3_3_1_16_2","unstructured":"Jialun Cao Meiziniu Li Ming Wen and Shing chi Cheung. 2023. A study on Prompt Design Advantages and Limitations of ChatGPT for Deep Learning Program Repair. arxiv:https:\/\/arXiv.org\/abs\/2304.08191\u00a0[cs.SE] https:\/\/arxiv.org\/abs\/2304.08191"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23082"},{"key":"e_1_3_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23082"},{"key":"e_1_3_3_1_19_2","doi-asserted-by":"crossref","unstructured":"William Enck Peter Gilbert Seungyeop Han Vasant Tendulkar Byung-Gon Chun Landon\u00a0P Cox Jaeyeon Jung Patrick McDaniel and Anmol\u00a0N Sheth. 2014. Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM Transactions on Computer Systems (TOCS) 32 2 (2014) 1\u201329.","DOI":"10.1145\/2619091"},{"key":"e_1_3_3_1_20_2","volume-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council","author":"Parliament European","unstructured":"European Parliament and Council of the European Union. [n. d.]. Regulation (EU) 2016\/679 of the European Parliament and of the Council. https:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_3_1_21_2","doi-asserted-by":"crossref","unstructured":"Lucas Franke Huayu Liang Sahar Farzanehpour Aaron Brantly James\u00a0C Davis and Chris Brown. 2024. An Exploratory Mixed-Methods Study on General Data Protection Regulation (GDPR) Compliance in Open-Source Software. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2406.14724 (2024).","DOI":"10.1145\/3674805.3686692"},{"key":"e_1_3_3_1_22_2","first-page":"569","volume-title":"International Conference on Security and Privacy in Communication Systems","author":"Hao Xiantong","year":"2022","unstructured":"Xiantong Hao, Dandan Ma, and Hongliang Liang. 2022. Detection and Privacy Leakage Analysis of Third-Party Libraries in Android Apps. In International Conference on Security and Privacy in Communication Systems. Springer, 569\u2013587."},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/MobileSoft52590.2021.00013"},{"key":"e_1_3_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE.2017.7889265"},{"key":"e_1_3_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/MOBILSoft59058.2023.00016"},{"key":"e_1_3_3_1_26_2","doi-asserted-by":"crossref","unstructured":"Raula\u00a0Gaikovina Kula Daniel\u00a0M German Ali Ouni Takashi Ishio and Katsuro Inoue. 2018. Do developers update their library dependencies? An empirical study on the impact of security advisories on library migration. Empirical Software Engineering 23 (2018) 384\u2013417.","DOI":"10.1007\/s10664-017-9521-5"},{"key":"e_1_3_3_1_27_2","first-page":"3667","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Nguyen Trung\u00a0Tin","year":"2021","unstructured":"Trung\u00a0Tin Nguyen, Michael Backes, Ninja Marnau, and Ben Stock. 2021. Share First, Ask Later (or Never?) Studying Violations of GDPR\u2019s Explicit Consent in Android Apps. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 3667\u20133684. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/nguyen"},{"key":"e_1_3_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2015.23008"},{"key":"e_1_3_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680333"},{"key":"e_1_3_3_1_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510135"},{"key":"e_1_3_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/MobiSecServ50855.2022.9727217"},{"key":"e_1_3_3_1_32_2","doi-asserted-by":"crossref","unstructured":"Gulshan Shrivastava Prabhat Kumar Deepak Gupta and Joel\u00a0JPC Rodrigues. 2020. Privacy issues of android application permissions: A literature review. Transactions on Emerging Telecommunications Technologies 31 12 (2020) e3773.","DOI":"10.1002\/ett.3773"},{"key":"e_1_3_3_1_33_2","volume-title":"The Eleventh International Conference on Learning Representations","author":"Si Chenglei","year":"2022","unstructured":"Chenglei Si, Zhe Gan, Zhengyuan Yang, Shuohang Wang, Jianfeng Wang, Jordan\u00a0Lee Boyd-Graber, and Lijuan Wang. 2022. Prompting GPT-3 To Be Reliable. In The Eleventh International Conference on Learning Representations."},{"key":"e_1_3_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884855"},{"key":"e_1_3_3_1_35_2","first-page":"195","volume-title":"Workshop on Mobile Security Technologies (MoST)","author":"Stevens Ryan","year":"2012","unstructured":"Ryan Stevens, Clint Gibler, Jon Crussell, Jeremy Erickson, and Hao Chen. 2012. Investigating user privacy in android ad libraries. In Workshop on Mobile Security Technologies (MoST) , Vol.\u00a010. 195\u2013197."},{"key":"e_1_3_3_1_36_2","doi-asserted-by":"crossref","unstructured":"Yutian Tang Haoyu Wang Xian Zhan Xiapu Luo Yajin Zhou Hao Zhou Qiben Yan Yulei Sui and Jacky Keung. 2021. A systematical study on application performance management libraries for apps. IEEE Transactions on Software Engineering 48 8 (2021) 3044\u20133065.","DOI":"10.1109\/TSE.2021.3077654"},{"key":"e_1_3_3_1_37_2","unstructured":"Ash Turner. 2024. How Many Apps are There in the World (2024). https:\/\/www.bankmycell.com\/blog\/number-of-mobile-apps-worldwide"},{"key":"e_1_3_3_1_38_2","series-title":"(CASCON \u201999)","first-page":"13","volume-title":"Proceedings of the 1999 Conference of the Centre for Advanced Studies on Collaborative Research","author":"Vall\u00e9e-Rai Raja","year":"1999","unstructured":"Raja Vall\u00e9e-Rai, Phong Co, Etienne Gagnon, Laurie Hendren, Patrick Lam, and Vijay Sundaresan. 1999. Soot - a Java bytecode optimization framework. In Proceedings of the 1999 Conference of the Centre for Advanced Studies on Collaborative Research (Mississauga, Ontario, Canada) (CASCON \u201999). IBM Press, 13."},{"key":"e_1_3_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-C.2017.161"},{"key":"e_1_3_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180196"},{"key":"e_1_3_3_1_41_2","doi-asserted-by":"crossref","unstructured":"Sarah Wang\u00a0Han and Abu\u00a0Bakar Munir. 2018. Information Security Technology-Personal Information Security Specification: China\u2019s Version of the GDPR? Eur. Data Prot. L. Rev. 4 (2018) 535.","DOI":"10.21552\/edpl\/2018\/4\/19"},{"key":"e_1_3_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363193"},{"key":"e_1_3_3_1_43_2","doi-asserted-by":"crossref","unstructured":"Le Yu Xiapu Luo Jiachi Chen Hao Zhou Tao Zhang Henry Chang and Hareton\u00a0KN Leung. 2018. Ppchecker: Towards accessing the trustworthiness of android apps\u2019 privacy policies. IEEE Transactions on Software Engineering 47 2 (2018) 221\u2013242.","DOI":"10.1109\/TSE.2018.2886875"},{"key":"e_1_3_3_1_44_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.55"},{"key":"e_1_3_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/2808117.2808125"},{"key":"e_1_3_3_1_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00150"},{"key":"e_1_3_3_1_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380401"},{"key":"e_1_3_3_1_48_2","doi-asserted-by":"crossref","unstructured":"Kaifa Zhao Xian Zhan Shiyao\u00a0Zhou Le\u00a0Yu Hao Zhou Xiapu Luo Haoyu Wang and Yepang Liu. 2023. Demystifying privacy policy of third-party libraries in mobile apps. In 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE).","DOI":"10.1109\/ICSE48619.2023.00137"},{"key":"e_1_3_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485387"},{"key":"e_1_3_3_1_50_2","volume-title":"2016 AAAI Fall Symposium Series","author":"Zimmeck Sebastian","year":"2016","unstructured":"Sebastian Zimmeck, Ziqi Wang, Lieyong Zou, Roger Iyengar, Bin Liu, Florian Schaub, Shomir Wilson, Norman Sadeh, Steven Bellovin, and Joel Reidenberg. 2016. Automated analysis of privacy requirements for mobile apps. In 2016 AAAI Fall Symposium Series."}],"event":{"name":"FORGE '26: IEEE\/ACM Third International Conference on AI Foundation Models and Software Engineering","location":"Rio de Janeiro , Brazil","acronym":"FORGE '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 2026 IEEE\/ACM Third International Conference on AI Foundation Models and Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3793655.3793721","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T16:48:37Z","timestamp":1784652517000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3793655.3793721"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":49,"alternative-id":["10.1145\/3793655.3793721","10.1145\/3793655"],"URL":"https:\/\/doi.org\/10.1145\/3793655.3793721","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-07-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}