{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,24]],"date-time":"2026-09-24T04:03:58Z","timestamp":1790222638051,"version":"4.1.0"},"reference-count":250,"publisher":"Association for Computing Machinery (ACM)","issue":"9","license":[{"start":{"date-parts":[[2026,8,21]],"date-time":"2026-08-21T00:00:00Z","timestamp":1787270400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["grant Nos. 62572209, 62502168"],"award-info":[{"award-number":["grant Nos. 62572209, 62502168"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Hubei Provincial Key Research and Development Program","award":["grant No. 2025BAB057"],"award-info":[{"award-number":["grant No. 2025BAB057"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Softw. Eng. Methodol."],"published-print":{"date-parts":[[2026,9,30]]},"abstract":"<jats:p>Mobile applications (apps) have grown into complex, multi-platform systems that support diverse services and operate within varying regulatory and distribution contexts. Traditional analysis techniques have established a strong foundation for ensuring quality, security, and compliance, but face increasing challenges as mobile apps evolve. This article presents a three-layer perspective to examine these challenges. The Artifact Layer highlights how heterogeneous code bases and protection mechanisms reduce the analyzability of packaged apps. The Runtime Layer addresses growing execution complexity, from multi-modal interactions and super-app architectures to AI-driven autonomous operations. The Ecosystem Layer considers broader contexts, including emerging platforms, fragmented distribution channels, and region-specific regulatory requirements. New characteristics across these layers interact and compound, creating difficulties that existing approaches are not designed to handle. For each layer, we identify key challenges and potential research directions, including framework-aware analysis, adaptive testing, and policy-aware compliance verification. We also discuss how large language models bring new analytical capabilities to the field, while their integration into apps raises new security and privacy concerns. This article aims to clarify where established methods fall short and highlight directions for future research in this evolving field.<\/jats:p>","DOI":"10.1145\/3819579","type":"journal-article","created":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T13:18:55Z","timestamp":1781011135000},"page":"1-35","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Mobile App Analysis in the New Era: Challenges and the Road Ahead"],"prefix":"10.1145","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-5682-2950","authenticated-orcid":false,"given":"Jiale","family":"Wu","sequence":"first","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5216-933X","authenticated-orcid":false,"given":"Tianming","family":"Liu","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8793-5367","authenticated-orcid":false,"given":"Yanjie","family":"Zhao","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1100-8633","authenticated-orcid":false,"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,8,21]]},"reference":[{"key":"e_1_3_1_2_2","unstructured":"360 Tianyu Lab. 2025. 360 Jiagu. Retrieved September 29 2025 from https:\/\/jiagu.360.cn\/"},{"key":"e_1_3_1_3_2","unstructured":"Android Open Source Project. 2025. Android Automotive OS. Retrieved February 21 2025 from https:\/\/source.android.com\/docs\/automotive\/start\/what_automotive"},{"key":"e_1_3_1_4_2","unstructured":"Appdome. 2025. Appdome\u2014Mobile App Security & Protection Platform. Retrieved September 29 2025 from https:\/\/www.appdome.com\/"},{"key":"e_1_3_1_5_2","unstructured":"Apple Developer. 2025. Apple VisionOS. Retrieved February 21 2025 from https:\/\/developer.apple.com\/visionos\/"},{"key":"e_1_3_1_6_2","unstructured":"Bytedance. 2025. Appshark. Retrieved September 29 2025 from https:\/\/github.com\/bytedance\/appshark"},{"key":"e_1_3_1_7_2","unstructured":"Aptimize. 2025. Apptimize. Retrieved February 21 2025 from https:\/\/apptimize.com\/product\/instant-update"},{"key":"e_1_3_1_8_2","unstructured":"Huawei Developer. 2025. ArkTS Language\u2014Getting Started. Retrieved February 21 2025 from https:\/\/developer.huawei.com\/consumer\/cn\/doc\/harmonyos-guides-V13\/arkts-get-started-V13"},{"key":"e_1_3_1_9_2","unstructured":"Android Developers. 2025. Car App Quality. Retrieved February 21 2025 from https:\/\/developer.android.com\/docs\/quality-guidelines\/car-app-quality"},{"key":"e_1_3_1_10_2","unstructured":"CodePush. 2025. CodePush. Retrieved February 21 2025 from https:\/\/appcenter.ms\/"},{"key":"e_1_3_1_11_2","unstructured":"OPPO. 2025. ColorOS 15. Retrieved September 29 2025 from https:\/\/www.oppo.com\/en\/coloros15\/"},{"key":"e_1_3_1_12_2","unstructured":"Dart. 2025. Dart Programming Language. Retrieved February 21 2025 from https:\/\/dart.dev\/"},{"key":"e_1_3_1_13_2","unstructured":"Flutter. 2025. Flutter\u2014Build Apps for Any Screen. Retrieved February 21 2025 from https:\/\/flutter.dev\/"},{"key":"e_1_3_1_14_2","unstructured":"Ethan Blake. 2025. Flutter Eval. Retrieved February 21 2025 from https:\/\/pub.dev\/packages\/flutter_eval"},{"key":"e_1_3_1_15_2","unstructured":"Fuchsia. 2025. Welcome to Fuchsia. Retrieved February 21 2025 from https:\/\/fuchsia.dev\/"},{"key":"e_1_3_1_16_2","unstructured":"Google. 2025. GooglePlay Developer Policy Center. Retrieved February 21 2025 from https:\/\/play.google\/developer-content-policy\/"},{"key":"e_1_3_1_17_2","unstructured":"Hansel. 2025. Hansel. Retrieved February 21 2025 from https:\/\/hansel.io\/"},{"key":"e_1_3_1_18_2","unstructured":"HarmonyOS. 2025. HarmonyOS. Retrieved February 21 2025 from https:\/\/www.harmonyos.com\/en\/"},{"key":"e_1_3_1_19_2","unstructured":"HUAWEI Global. 2025. HUAWEI AppGallery. Retrieved September 29 2025 from https:\/\/consumer.huawei.com\/en\/mobileservices\/appgallery\/"},{"key":"e_1_3_1_20_2","unstructured":"Ionic Framework. 2025. Ionic Framework. Retrieved February 21 2025 from https:\/\/ionicframework.com\/"},{"key":"e_1_3_1_21_2","unstructured":"Kotlin Programming Language. 2025. Kotlin Multiplatform Documentation. Retrieved February 21 2025 from https:\/\/kotlinlang.org\/docs\/multiplatform.html"},{"key":"e_1_3_1_22_2","unstructured":"Kotlin Programming Language. 2025. Kotlin Programming Language. Retrieved February 21 2025 from https:\/\/kotlinlang.org\/"},{"key":"e_1_3_1_23_2","unstructured":"LangChain. 2025. LangChain. Retrieved February 21 2025 from https:\/\/www.langchain.com\/"},{"key":"e_1_3_1_24_2","unstructured":"Meta. 2025. Meta Quest. Retrieved February 21 2025 from https:\/\/www.meta.com\/quest\/"},{"key":"e_1_3_1_25_2","unstructured":"Alibaba Cloud. 2025. Mobile Security Armor MSA. Retrieved September 29 2025 from https:\/\/www.aliyun.com\/product\/mobilepaas\/mpaas_ppm_public_cn"},{"key":"e_1_3_1_26_2","unstructured":"Promon SHIELD. 2025. Promon\u2014App Shielding and Application Security. Retrieved September 29 2025 from https:\/\/www.promon.io\/"},{"key":"e_1_3_1_27_2","unstructured":"Node.js. 2025. React Native. Retrieved February 21 2025 from https:\/\/rn.nodejs.cn\/"},{"key":"e_1_3_1_28_2","unstructured":"Shorebird. 2025. ShoreBird. Retrieved February 21 2025 from https:\/\/shorebird.dev\/"},{"key":"e_1_3_1_29_2","unstructured":"Apple Developer. 2025. Storyboard: Guides and Sample Code. Retrieved February 21 2025 from https:\/\/developer.apple.com\/library\/content\/documentation\/General\/Conceptual\/Devpedia-CocoaApp\/Storyboard.html"},{"key":"e_1_3_1_30_2","unstructured":"Tencent App Store. 2025. Tencent Appstore. Retrieved September 29 2025 from https:\/\/appstore.tencent.com\/"},{"key":"e_1_3_1_31_2","unstructured":"Tencent Cloud. 2025. Tencent Mobile Security\/LeGu. Retrieved September 29 2025 from https:\/\/www.tencentcloud.com\/zh\/products\/ms"},{"key":"e_1_3_1_32_2","unstructured":"2025. Tizen. Retrieved February 21 2025 from https:\/\/www.tizen.org\/"},{"key":"e_1_3_1_33_2","unstructured":"GitHub. 2025. TJ Watson Libraries for Analysis. Retrieved February 17 2025 from https:\/\/github.com\/wala\/WALA"},{"key":"e_1_3_1_34_2","unstructured":"Ubuntu Touch. 2025. Ubuntu Touch. Retrieved February 21 2025 from https:\/\/www.ubuntu-touch.io\/apps\/"},{"key":"e_1_3_1_35_2","unstructured":"Android Developers. 2025. Wear OS App Quality. Retrieved February 21 2025 from https:\/\/developer.android.com\/docs\/quality-guidelines\/wear-app-quality"},{"key":"e_1_3_1_36_2","unstructured":"Xiaomi HyperOS. 2025. Xiaomi HyperOS. Retrieved September 29 2025 from https:\/\/hyperos.mi.com\/"},{"key":"e_1_3_1_37_2","unstructured":"Ant Group. 2025. YASA Security Station. Retrieved from https:\/\/cybersec.antgroup.com\/station"},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.JSS.2019.07.088"},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616330"},{"key":"e_1_3_1_41_2","unstructured":"Omer Akgul Sai Teja Peddinti Nina Taft Michelle L. Mazurek Hamza Harkous Animesh Srivastava and Benoit Seguin. 2024. A decade of privacy-relevant Android app reviews: Large scale trends. arXiv:2403.02292. Retrieved from https:\/\/arxiv.org\/abs\/2403.02292"},{"key":"e_1_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00142"},{"key":"e_1_3_1_43_2","unstructured":"Marco Alecci Jordan Samhi Tegawend\u00e9 F. Bissyand\u00e9 and Jacques Klein. 2025. Evaluating large language models in detecting secrets in Android apps. arXiv:2510.18601. Retrieved from https:\/\/arxiv.org\/abs\/2510.18601"},{"key":"e_1_3_1_44_2","unstructured":"Alibaba. 2025. AndFix\u2014Android App Hot-Fix Library. Retrieved February 21 2025 from https:\/\/github.com\/alibaba\/AndFix"},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186035"},{"key":"e_1_3_1_46_2","doi-asserted-by":"crossref","unstructured":"Mohammed K. Alzaylaee Suleiman Y. Yerima and Sakir Sezer. 2019. DL-Droid: Deep learning based Android malware detection using real devices. arXiv:1911.10113. Retrieved from http:\/\/arxiv.org\/abs\/1911.10113","DOI":"10.1016\/j.cose.2019.101663"},{"key":"e_1_3_1_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098247"},{"key":"e_1_3_1_48_2","unstructured":"Apple Inc. 2024. Apple Intelligence Is Available Today on iPhone iPad and Mac. Retrieved January 10 2025 from https:\/\/www.apple.com\/newsroom\/2024\/10\/apple-intelligence-is-available-today-on-iphone-ipad-and-mac\/"},{"key":"e_1_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23247"},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2792941"},{"key":"e_1_3_1_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_1_52_2","doi-asserted-by":"crossref","unstructured":"Alexandre Bartel Jacques Klein Martin Monperrus and Yves Le Traon. 2014. Static Analysis for extracting permission checks of a large scale framework: The challenges and solutions for analyzing Android. arXiv:1408.3976. Retrieved from http:\/\/arxiv.org\/abs\/1408.3976","DOI":"10.1109\/TSE.2014.2322867"},{"key":"e_1_3_1_53_2","doi-asserted-by":"crossref","unstructured":"Supraja Baskaran Lianying Zhao Mohammad Mannan and Amr M. Youssef. 2023. Measuring the leakage and exploitability of authentication secrets in super-apps: The WeChat case. arXiv:2307.09317. Retrieved from https:\/\/arxiv.org\/abs\/2307.09317","DOI":"10.1145\/3607199.3607236"},{"key":"e_1_3_1_54_2","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2011.6112328"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.18420\/SE2021_02"},{"key":"e_1_3_1_56_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.JISA.2020.102463"},{"key":"e_1_3_1_57_2","doi-asserted-by":"publisher","DOI":"10.1007\/S10207-018-0415-3"},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-97620-9_15"},{"key":"e_1_3_1_59_2","unstructured":"Benyamin Beyzaei Saghar Talebipour Ghazal Rafiei Nenad Medvidovic and Sam Malek. 2024. Automated test transfer across Android apps using large language models. arXiv:2411.17933. Retrieved from https:\/\/arxiv.org\/abs\/2411.17933"},{"key":"e_1_3_1_60_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.COSE.2023.103277"},{"key":"e_1_3_1_61_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978422"},{"key":"e_1_3_1_62_2","unstructured":"ByteDance. 2025. Fastbot(2.0) Is a Model-Based Testing Tool for Modeling GUI Transitions to Discover App Stability Problems. Retrieved January 1 2026 from https:\/\/github.com\/bytedance\/Fastbot_Android"},{"key":"e_1_3_1_63_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.INFSOF.2020.106291"},{"key":"e_1_3_1_64_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2879302"},{"key":"e_1_3_1_65_2","doi-asserted-by":"publisher","DOI":"10.1145\/3728978"},{"key":"e_1_3_1_66_2","unstructured":"Nicholas Carlini Florian Tram\u00e8r Eric Wallace Matthew Jagielski Ariel Herbert-Voss Katherine Lee Adam Roberts Tom B. Brown Dawn Song \u00dalfar Erlingsson et al. 2020. Extracting training data from large language models. arXiv:2012.07805. Retrieved from https:\/\/arxiv.org\/abs\/2012.07805"},{"key":"e_1_3_1_67_2","first-page":"125","volume-title":"Proceedings of the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks","author":"Chan Patrick P. F.","year":"2012","unstructured":"Patrick P. F. Chan, Lucas C. K. Hui, and Siu-Ming Yiu. 2012. Droidchecker: Analyzing Android applications for capability leak. In Proceedings of the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, 125\u2013136."},{"key":"e_1_3_1_68_2","doi-asserted-by":"crossref","unstructured":"Patrick Chao Edoardo Debenedetti Alexander Robey Maksym Andriushchenko Francesco Croce Vikash Sehwag Edgar Dobriban Nicolas Flammarion George J. Pappas Florian Tram\u00e8r et al. 2024. JailbreakBench: An open robustness benchmark for jailbreaking large language models. arXiv:2404.01318. Retrieved from https:\/\/arxiv.org\/abs\/2404.01318","DOI":"10.52202\/079017-1745"},{"key":"e_1_3_1_69_2","unstructured":"Daihang Chen Yonghui Liu Mingyi Zhou Yanjie Zhao Haoyu Wang Shuai Wang Xiao Chen Tegawend\u00e9 F. Bissyand\u00e9 Jacques Klein and Li Li. 2024. LLM for Mobile: An Initial Roadmap. arXiv:2407.06573. Retrieved from https:\/\/arxiv.org\/abs\/2407.06573"},{"key":"e_1_3_1_70_2","unstructured":"Guoqiang Chen Xin Jin and Zhiqiang Lin. 2025. JsDeObsBench: Measuring and benchmarking LLMs for JavaScript deobfuscation. arXiv:2506.20170. Retrieved from https:\/\/arxiv.org\/abs\/2506.20170"},{"key":"e_1_3_1_71_2","doi-asserted-by":"publisher","DOI":"10.1145\/3647632.3651388"},{"key":"e_1_3_1_72_2","unstructured":"Haonan Chen Daihang Chen Yizhuo Yang Lingyun Xu Liang Gao Mingyi Zhou Chunming Hu and Li Li. 2025. ArkAnalyzer: The static analysis framework for OpenHarmony. arXiv:2501.05798. Retrieved from https:\/\/arxiv.org\/abs\/2501.05798"},{"key":"e_1_3_1_73_2","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"e_1_3_1_74_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00208"},{"key":"e_1_3_1_75_2","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3744836"},{"key":"e_1_3_1_76_2","unstructured":"Wenhao Chen Morris Chang Witawas Srisa-An and Yong Guan. 2025. APEX: Automatic event sequence generation for Android applications. arXiv:2509.02412. Retrieved from https:\/\/arxiv.org\/abs\/2509.02412"},{"key":"e_1_3_1_77_2","doi-asserted-by":"crossref","unstructured":"Yurun Chen Xueyu Hu Keting Yin Juncheng Li and Shengyu Zhang. 2025. AEIA-MN: Evaluating the robustness of multimodal LLM-powered mobile agents against active environmental injection attacks. arXiv:2502.13053. Retrieved from https:\/\/arxiv.org\/abs\/2502.13053","DOI":"10.1145\/3746027.3755646"},{"key":"e_1_3_1_78_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.89"},{"key":"e_1_3_1_79_2","unstructured":"Chenhui Cui Tao Li Junjie Wang Chunyang Chen Dave Towey and Rubing Huang. 2024. Large language models for mobile GUI text input generation: An empirical study. arXiv:2404.08948. Retrieved from https:\/\/arxiv.org\/abs\/2404.08948"},{"key":"e_1_3_1_80_2","unstructured":"Hao Cui Rahmadi Trimananda Athina Markopoulou and Scott Jordan. 2022. PoliGraph: Automated privacy policy analysis using knowledge graphs. arXiv:2210.06746. Retrieved from https:\/\/arxiv.org\/abs\/2210.06746"},{"key":"e_1_3_1_81_2","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766509"},{"key":"e_1_3_1_82_2","unstructured":"Jorge Damian. 2025. The OWASP AI\/LLM Top 10: Understanding Security and Privacy Risks in AI-Powered Mobile Applications. NowSecure Blog. Retrieved December 22 2025 from https:\/\/www.nowsecure.com\/blog\/2025\/11\/05\/the-owasp-ai-llm-top-10-understanding-security-and-privacy-risks-in-ai-powered-mobile-applications\/"},{"key":"e_1_3_1_83_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.JPDC.2019.11.001"},{"key":"e_1_3_1_84_2","doi-asserted-by":"publisher","DOI":"10.1145\/3728898"},{"key":"e_1_3_1_85_2","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2012.114"},{"key":"e_1_3_1_86_2","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300027"},{"key":"e_1_3_1_87_2","unstructured":"Renhua Ding Xiao Yang Zhengwei Fang Jun Luo Kun He and Jun Zhu. 2025. Practical and stealthy touch-guided jailbreak attacks on deployed mobile vision-language agents. arXiv:2510.07809. Retrieved from https:\/\/arxiv.org\/abs\/2510.07809"},{"key":"e_1_3_1_88_2","doi-asserted-by":"crossref","unstructured":"Shuaike Dong Menghao Li Wenrui Diao Xiangyu Liu Jian Liu Zhou Li Fenghao Xu Kai Chen Xiaofeng Wang and Kehuan Zhang. 2018. Understanding Android obfuscation techniques: A large-scale investigation in the wild. arXiv:1801.01633. Retrieved from http:\/\/arxiv.org\/abs\/1801.01633","DOI":"10.1007\/978-3-030-01701-9_10"},{"key":"e_1_3_1_89_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380402"},{"key":"e_1_3_1_90_2","first-page":"2099","volume-title":"Proceedings of the 2024 39th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Dong Zikan","year":"2024","unstructured":"Zikan Dong, Yanjie Zhao, Tianming Liu, Chao Wang, Guosheng Xu, Guoai Xu, Lin Zhang, and Haoyu Wang. 2024. Same app, different behaviors: Uncovering device-specific behaviors in Android apps. In Proceedings of the 2024 39th IEEE\/ACM International Conference on Automated Software Engineering (ASE), 2099\u20132109."},{"key":"e_1_3_1_91_2","volume-title":"Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS \u201918)","author":"Duan Yue","year":"2018","unstructured":"Yue Duan, Mu Zhang, Abhishek Vasisht Bhaskar, Heng Yin, Xiaorui Pan, Tongxin Li, Xueqiang Wang, and XiaoFeng Wang. 2018. Things you may not know about Android (un)packers: A systematic study based on whole-system emulation. In Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS \u201918). The Internet Society. Retrieved from https:\/\/www.ndss-symposium.org\/wp-content\/uploads\/2018\/02\/ndss2018_04A-4_Duan_paper.pdf"},{"key":"e_1_3_1_92_2","doi-asserted-by":"publisher","DOI":"10.3390\/electronics13122272"},{"key":"e_1_3_1_93_2","unstructured":"Filipe Esp\u00f3sito. 2024. A Deep Dive into How Developers Trick App Store Review into Approving Malicious Apps. 9to5Mac. Retrieved from https:\/\/9to5mac.com\/2024\/08\/02\/developers-trick-app-store-review\/"},{"key":"e_1_3_1_94_2","unstructured":"Angela Fan Beliz Gokkaya Mark Harman Mitya Lyubarskiy Shubho Sengupta Shin Yoo and Jie M. Zhang. 2023. Large language models for software engineering: Survey and open problems. arXiv:2310.03533. Retrieved from https:\/\/arxiv.org\/abs\/2310.03533"},{"key":"e_1_3_1_95_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00085"},{"key":"e_1_3_1_96_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2844349"},{"key":"e_1_3_1_97_2","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3608137"},{"key":"e_1_3_1_98_2","unstructured":"Sidong Feng Changhao Du Huaxiao Liu Qingnan Wang Zhengwei Lv Mengfei Wang and Chunyang Chen. 2025. Breaking single-tester limits: Multi-agent LLMs for multi-user feature testing. arXiv:2506.17539. Retrieved from https:\/\/arxiv.org\/abs\/2506.17539"},{"key":"e_1_3_1_99_2","doi-asserted-by":"crossref","unstructured":"Sidong Feng Haochuan Lu Jianqin Jiang Ting Xiong Likun Huang Yinglin Liang Xiaoqin Li Yuetang Deng and Aldeida Aleti. 2024. Enabling cost-effective UI automation testing with retrieval-based LLMs: A case study in WeChat. arXiv:2409.07829. Retrieved from https:\/\/arxiv.org\/abs\/2409.07829","DOI":"10.1145\/3691620.3695260"},{"key":"e_1_3_1_100_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.COSE.2019.101688"},{"key":"e_1_3_1_101_2","unstructured":"GDPR.eu. 2024. General Data Protection Regulation (GDPR) Compliance Guidelines. MISC. Retrieved from https:\/\/gdpr.eu\/"},{"key":"e_1_3_1_102_2","doi-asserted-by":"publisher","DOI":"10.1109\/QRS-C.2019.00027"},{"key":"e_1_3_1_103_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3593456"},{"key":"e_1_3_1_104_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_17"},{"key":"e_1_3_1_105_2","first-page":"324","volume-title":"Proceedings of the 1st International Workshop on Intelligent & CyberPhysical Systems (ICyberPhyS \u201924)","author":"Golovko Igor","year":"2024","unstructured":"Igor Golovko, Oleg Savenko, Petro Vizhevskiy, Olexandr Klein, and Abdel-Badeeh M. Salem. 2024. Obfuscation technologies of high-level source code using artificial intelligence. In Proceedings of the 1st International Workshop on Intelligent & CyberPhysical Systems (ICyberPhyS \u201924). Tetiana Hovorushchenko, Oleg Savenko, Peter T. Popov, and Sergii Lysenko (Eds.), CEUR-WS.org, 324\u2013338. Retrieved from https:\/\/ceur-ws.org\/Vol-3736\/paper24.pdf"},{"key":"e_1_3_1_106_2","unstructured":"Google. 2024. UI\/Application Exerciser Monkey. Retrieved February 14 2024 from https:\/\/developer.android.com\/studio\/test\/other-testing-tools\/monkey"},{"key":"e_1_3_1_107_2","unstructured":"Google. 2025. The Assistant Experience on Mobile Is Upgrading to Gemini. Retrieved January 10 2025 from https:\/\/blog.google\/products\/gemini\/google-assistant-gemini-mobile\/"},{"key":"e_1_3_1_108_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00029"},{"key":"e_1_3_1_109_2","unstructured":"Hanyang Guo Hong-Ning Dai Xiapu Luo Zibin Zheng Gengyang Xu and Fengliang He. 2024. An empirical study on oculus virtual reality applications: Security and privacy perspectives. arXiv:2402.13815. Retrieved from https:\/\/arxiv.org\/abs\/2402.13815"},{"key":"e_1_3_1_110_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00225"},{"key":"e_1_3_1_111_2","unstructured":"Yanhui Guo Dong Wang Liu Wang Yongsheng Fang Chao Wang Minghui Yang Tianming Liu and Haoyu Wang. 2024. Beyond app markets: Demystifying underground mobile app distribution via Telegram. arXiv:2408.03482. Retrieved from https:\/\/arxiv.org\/abs\/2408.03482"},{"key":"e_1_3_1_112_2","unstructured":"Kimberly Hau Safwat Hassan and Shurui Zhou. 2025. LLMs in mobile apps: Practices challenges and opportunities. arXiv:2502.15908. Retrieved from https:\/\/arxiv.org\/abs\/2502.15908"},{"key":"e_1_3_1_113_2","unstructured":"Android Headlines. 2024. This Is How Malicious Apps Trick Apple\u2019s App Store Security Filters. Android Headlines. Retrieved from https:\/\/www.androidheadlines.com\/2024\/08\/malicious-apps-apple-app-store-security-filters.html"},{"key":"e_1_3_1_114_2","unstructured":"Xinyi Hou Yanjie Zhao Yue Liu Zhou Yang Kailong Wang Li Li Xiapu Luo David Lo John C. Grundy and Haoyu Wang. 2023. Large language models for software engineering: A systematic literature review. arXiv:2308.10620. Retrieved from https:\/\/arxiv.org\/abs\/2308.10620"},{"key":"e_1_3_1_115_2","unstructured":"Xinyi Hou Yanjie Zhao and Haoyu Wang. 2024. On the (in)security of LLM app stores. arXiv:2407.08422. Retrieved from https:\/\/arxiv.org\/abs\/2407.08422"},{"key":"e_1_3_1_116_2","volume-title":"Proceedings of the 31st Annual Network and Distributed System Security Symposium (NDSS \u201924)","author":"Hu Peiwei","year":"2024","unstructured":"Peiwei Hu, Ruigang Liang, and Kai Chen. 2024. DeGPT: Optimizing decompiler output with LLM. In Proceedings of the 31st Annual Network and Distributed System Security Symposium (NDSS \u201924). The Internet Society. Retrieved from https:\/\/www.ndss-symposium.org\/ndss-paper\/degpt-optimizing-decompiler-output-with-llm\/"},{"key":"e_1_3_1_117_2","unstructured":"Yuchao Huang Junjie Wang Zhe Liu Yawen Wang Song Wang Chunyang Chen Yuanzhe Hu and Qing Wang. 2023. CrashTranslator: Automatically reproducing mobile application crashes directly from stack trace. arXiv:2310.07128. Retrieved from https:\/\/arxiv.org\/abs\/2310.07128"},{"key":"e_1_3_1_118_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00043"},{"key":"e_1_3_1_119_2","doi-asserted-by":"crossref","unstructured":"Hamed Jelodar Samita Bai Parisa Hamedi Hesamodin Mohammadian Roozbeh Razavi-Far and Ali A. Ghorbani. 2025. Large language model (LLM) for software security: Code analysis malware analysis reverse engineering. arXiv:2504.07137. Retrieved from https:\/\/arxiv.org\/abs\/2504.07137","DOI":"10.1016\/j.jisa.2026.104390"},{"key":"e_1_3_1_120_2","unstructured":"Ran Jin Liu Wang Shidong Pan Luona Xu Tianming Liu and Haoyu Wang. 2026. Understanding user privacy perceptions of GenAI smartphones. arXiv:2604.05571. Retrieved from https:\/\/arxiv.org\/abs\/2604.05571"},{"key":"e_1_3_1_121_2","unstructured":"Bangyan Ju Jin Yang Tingting Yu Tamerlan Abdullayev Yuanyuan Wu Dingbang Wang and Yu Zhao. 2024. A study of using multimodal LLMs for non-crash functional bug detection in Android apps. arXiv:2407.19053. Retrieved from https:\/\/arxiv.org\/abs\/2407.19053"},{"key":"e_1_3_1_122_2","doi-asserted-by":"publisher","DOI":"10.1109\/InCACCT61598.2024.10550999"},{"key":"e_1_3_1_123_2","doi-asserted-by":"crossref","unstructured":"Mst Eshita Khatun Lamine Noureddine Zhiyong Sui and Aisha I. Ali-Gombe. 2025. AndroByte: LLM-driven privacy analysis through bytecode summarization and dynamic dataflow call graph generation. arXiv:2510.15112. Retrieved from https:\/\/arxiv.org\/abs\/2510.15112","DOI":"10.1109\/ACSAC67867.2025.00021"},{"key":"e_1_3_1_124_2","unstructured":"Hanna Kim Minkyoo Song Seung Ho Na Seungwon Shin and Kimin Lee. 2024. When LLMs go online: The emerging threat of web-enabled LLMs. arXiv:2410.14569. Retrieved from https:\/\/arxiv.org\/abs\/2410.14569"},{"key":"e_1_3_1_125_2","unstructured":"Patrick Kochberger Sebastian Schrittwieser Bart Coppens and Bjorn De Sutter. 2023. Evaluation methodologies in software protection research. arXiv:2307.07300. Retrieved from https:\/\/arxiv.org\/abs\/2307.07300"},{"key":"e_1_3_1_126_2","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3465772"},{"key":"e_1_3_1_127_2","first-page":"1203","volume-title":"Proceedings of the 31st USENIX Security Symposium (USENIX Security \u201922)","author":"Kumar Renuka","year":"2022","unstructured":"Renuka Kumar, Apurva Virkud, Ram Sundara Raman, Atul Prakash, and Roya Ensafi. 2022. A large-scale investigation into geodifferences in mobile apps. In Proceedings of the 31st USENIX Security Symposium (USENIX Security \u201922). Kevin R. B. Butler and Kurt Thomas (Eds.), USENIX Association, 1203\u20131220. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/kumar"},{"key":"e_1_3_1_128_2","volume-title":"Proceedings of the Cetus Users and Compiler Infastructure Workshop (CETUS \u201911)","volume":"15","author":"Lam Patrick","year":"2011","unstructured":"Patrick Lam, Eric Bodden, Ondrej Lhot\u00e1k, and Laurie Hendren. 2011. The soot framework for Java program analysis: A retrospective. In Proceedings of the Cetus Users and Compiler Infastructure Workshop (CETUS \u201911), Vol. 15."},{"key":"e_1_3_1_129_2","first-page":"765","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security \u201919)","author":"Lee Yeonjoon","year":"2019","unstructured":"Yeonjoon Lee, Xueqiang Wang, Kwangwuk Lee, Xiaojing Liao, XiaoFeng Wang, Tongxin Li, and Xianghang Mi. 2019. Understanding iOS-based crowdturfing through hidden UI analysis. In Proceedings of the 28th USENIX Security Symposium (USENIX Security \u201919). Nadia Heninger and Patrick Traynor (Eds.), USENIX Association, 765\u2013781. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/lee"},{"key":"e_1_3_1_130_2","doi-asserted-by":"publisher","DOI":"10.1145\/3715769"},{"key":"e_1_3_1_131_2","doi-asserted-by":"publisher","DOI":"10.1145\/3728884"},{"key":"e_1_3_1_132_2","unstructured":"Heng Li Zhang Cheng Bang Wu Liheng Yuan Cuiying Gao Wei Yuan and Xiapu Luo. 2023. Black-box adversarial example attack towards FCG based Android malware detection under incomplete feature information. arXiv:2303.08509. Retrieved from https:\/\/arxiv.org\/abs\/2303.08509"},{"key":"e_1_3_1_133_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_1_134_2","doi-asserted-by":"publisher","DOI":"10.1109\/TRUSTCOM.2014.50"},{"key":"e_1_3_1_135_2","doi-asserted-by":"publisher","DOI":"10.5555\/3620237.3620544"},{"key":"e_1_3_1_136_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3299945"},{"key":"e_1_3_1_137_2","unstructured":"Yao Li Sen Fang Tao Zhang and Haipeng Cai. 2024. Enhancing Android malware detection: The influence of ChatGPT on decision-centric task. arXiv:2410.04352. Retrieved from https:\/\/arxiv.org\/abs\/2410.04352"},{"key":"e_1_3_1_138_2","doi-asserted-by":"publisher","DOI":"10.1109\/DTPI61353.2024.10778901"},{"key":"e_1_3_1_139_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-C.2017.8"},{"key":"e_1_3_1_140_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00104"},{"key":"e_1_3_1_141_2","unstructured":"Zeyi Liao Lingbo Mo Chejian Xu Mintong Kang Jiawei Zhang Chaowei Xiao Yuan Tian Bo Li and Huan Sun. 2024. EIA: Environmental injection attack on generalist web agents for privacy leakage. arXiv:2409.11295. Retrieved from https:\/\/arxiv.org\/abs\/2409.11295"},{"key":"e_1_3_1_142_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_4"},{"key":"e_1_3_1_143_2","first-page":"3767","volume-title":"Proceedings of the 34th USENIX Security Symposium (USENIX Security \u201925)","author":"Liu Fengyu","year":"2025","unstructured":"Fengyu Liu, Yuan Zhang, Jiaqi Luo, Jiarun Dai, Tian Chen, Letian Yuan, Zhengmin Yu, Youkun Shi, Ke Li, Chengyuan Zhou, et al. 2025. Make agent defeat agent: Automatic detection of taint-style vulnerabilities in LLM-based agents. In Proceedings of the 34th USENIX Security Symposium (USENIX Security \u201925). Lujo Bauer and Giancarlo Pellegrino (Eds.), USENIX Association, 3767\u20133786. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity25\/presentation\/liu-fengyu"},{"key":"e_1_3_1_144_2","unstructured":"Guangyi Liu Pengxiang Zhao Liang Liu Yaxuan Guo Han Xiao Weifeng Lin Yuxiang Chai Yue Han Shuai Ren Hao Wang et al. 2025. LLM-powered GUI agents in phone automation: Surveying progress and prospects. arXiv:2504.19838. Retrieved from https:\/\/arxiv.org\/abs\/2504.19838"},{"key":"e_1_3_1_145_2","unstructured":"Junwei Liu Kaixin Wang Yixuan Chen Xin Peng Zhenpeng Chen Lingming Zhang and Yiling Lou. 2024. Large language model-based agents for software engineering: A survey. arXiv:2409.02977. Retrieved from https:\/\/arxiv.org\/abs\/2409.02977"},{"key":"e_1_3_1_146_2","unstructured":"Pei Liu Terry Yue Zhuo Jiawei Deng Thong James Shidong Pan Sherry Xu Zhenchang Xing Qinghua Lu Xiaoning Du and Hongyu Zhang. 2025. LLMAID: Identifying AI capabilities in Android apps with LLMs. arXiv:2511.19059. Retrieved from https:\/\/arxiv.org\/abs\/2511.19059"},{"key":"e_1_3_1_147_2","doi-asserted-by":"crossref","unstructured":"Ruofan Liu Xiwen Teoh Yun Lin Guanjie Chen Ruofei Ren Denys Poshyvanyk and Jin Song Dong. 2025. GUIPilot: A consistency-based mobile GUI testing approach for detecting application-specific bugs. arXiv:2506.07385. Retrieved from https:\/\/arxiv.org\/abs\/2506.07385","DOI":"10.1145\/3728909"},{"key":"e_1_3_1_148_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2019.2903186"},{"key":"e_1_3_1_149_2","unstructured":"Xiao Liu Bo Qin Dongzhu Liang Guang Dong Hanyu Lai Hanchen Zhang Hanlin Zhao Iat Long Iong Jiadai Sun Jiaqi Wang et al. 2024. AutoGLM: Autonomous foundation agents for GUIs. arXiv:2411.00820. Retrieved from https:\/\/arxiv.org\/abs\/2411.00820"},{"key":"e_1_3_1_150_2","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813668"},{"key":"e_1_3_1_151_2","unstructured":"Yonghui Liu Xiao Chen Pei Liu John Grundy Chunyang Chen and Li Li. 2023. ReuNify: A step towards whole program analysis for react native Android apps. arXiv:2309.03524. Retrieved from https:\/\/arxiv.org\/abs\/2309.03524"},{"key":"e_1_3_1_152_2","unstructured":"Yi Liu Gelei Deng Yuekang Li Kailong Wang Tianwei Zhang Yepang Liu Haoyu Wang Yan Zheng and Yang Liu. 2023. Prompt injection attack against LLM-integrated applications. arXiv:2306.05499. Retrieved from https:\/\/arxiv.org\/abs\/2306.05499"},{"key":"e_1_3_1_153_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASEW52652.2021.00023"},{"key":"e_1_3_1_154_2","doi-asserted-by":"publisher","DOI":"10.1007\/S11280-017-0458-9"},{"key":"e_1_3_1_155_2","unstructured":"Zhe Liu Chunyang Chen Junjie Wang Xing Che Yuekai Huang Jun Hu and Qing Wang. 2022. Fill in the blank: Context-aware automated text input generation for mobile GUI testing. arXiv:2212.04732. Retrieved from https:\/\/arxiv.org\/abs\/2212.04732"},{"key":"e_1_3_1_156_2","doi-asserted-by":"crossref","unstructured":"Zhe Liu Chunyang Chen Junjie Wang Mengzhuo Chen Boyu Wu Xing Che Dandan Wang and Qing Wang. 2023. Make LLM a testing expert: Bringing human-like interaction to mobile GUI testing via functionality-aware decisions. arXiv:2310.15780. Retrieved from https:\/\/arxiv.org\/abs\/2310.15780","DOI":"10.1145\/3597503.3639180"},{"key":"e_1_3_1_157_2","unstructured":"Zhe Liu Chunyang Chen Junjie Wang Mengzhuo Chen Boyu Wu Xing Che Dandan Wang and Qing Wang. 2023. Testing the limits: Unusual text inputs generation for mobile app crash detection with large language model. arXiv:2310.15657. Retrieved from https:\/\/arxiv.org\/abs\/2310.15657"},{"key":"e_1_3_1_158_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2025.3614469"},{"key":"e_1_3_1_159_2","volume-title":"Proceedings of the 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Liu Zichen","year":"2025","unstructured":"Zichen Liu and Xusheng Xiao. 2025. AppBDS: LLM-powered description synthesis for sensitive behaviors in mobile apps. In Proceedings of the 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE\/ACM."},{"key":"e_1_3_1_160_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.JISA.2019.102423"},{"key":"e_1_3_1_161_2","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382223"},{"key":"e_1_3_1_162_2","first-page":"89","volume-title":"Proceedings of the 1st International Workshop on Cloud Computing and Information Security","author":"Luoshi Zhang","year":"2013","unstructured":"Zhang Luoshi, Niu Yan, Wu Xiao, Wang Zhaoguo, and Xue Yibo. 2013. A3: Automatic analysis of Android malware. In Proceedings of the 1st International Workshop on Cloud Computing and Information Security. Atlantis Press, 89\u201393."},{"key":"e_1_3_1_163_2","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3559505"},{"key":"e_1_3_1_164_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2896003"},{"key":"e_1_3_1_165_2","doi-asserted-by":"publisher","DOI":"10.1145\/2889160.2889178"},{"key":"e_1_3_1_166_2","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931054"},{"key":"e_1_3_1_167_2","doi-asserted-by":"crossref","unstructured":"Enrico Mariconti Lucky Onwuzurike Panagiotis Andriotis Emiliano De Cristofaro Gordon J. Ross and Gianluca Stringhini. 2016. MaMaDroid: Detecting Android malware by building Markov chains of behavioral models. arXiv:1612.04433. Retrieved from http:\/\/arxiv.org\/abs\/1612.04433","DOI":"10.14722\/ndss.2017.23353"},{"key":"e_1_3_1_168_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00039"},{"key":"e_1_3_1_169_2","unstructured":"Microsoft. 2024. 6 AI Trends You\u2019ll See More of in 2025. Retrieved from https:\/\/news.microsoft.com\/source\/features\/ai\/6-ai-trends-youll-see-more-of-in-2025\/"},{"key":"e_1_3_1_170_2","unstructured":"Seyedreza Mohseni Seyedali Mohammadi Deepa Tilwani Yash Saxena Gerald Ndawula Sriram Vema Edward Raff and Manas Gaur. 2024. Can LLMs obfuscate code? A systematic analysis of large language models into assembly code obfuscation. arXiv:2412.16135. Retrieved from https:\/\/arxiv.org\/abs\/2412.16135"},{"key":"e_1_3_1_171_2","doi-asserted-by":"publisher","DOI":"10.56553\/POPETS-2024-0094"},{"key":"e_1_3_1_172_2","first-page":"3667","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921)","author":"Nguyen Trung Tin","year":"2021","unstructured":"Trung Tin Nguyen, Michael Backes, Ninja Marnau, and Ben Stock. 2021. Share first, ask later (or never?) studying violations of GDPR\u2019s explicit consent in Android apps. In Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921). Michael D. Bailey and Rachel Greenstadt (Eds.), USENIX Association, 3667\u20133684. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/nguyen"},{"key":"e_1_3_1_173_2","doi-asserted-by":"crossref","unstructured":"Akila Niroshan Suranga Seneviratne and Aruna Seneviratne. 2025. An empirical study of code obfuscation practices in the Google Play Store. arXiv:2502.04636. Retrieved from https:\/\/arxiv.org\/abs\/2502.04636","DOI":"10.1145\/3672608.3707860"},{"key":"e_1_3_1_174_2","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397354"},{"key":"e_1_3_1_175_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3002842"},{"key":"e_1_3_1_176_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2799522"},{"key":"e_1_3_1_177_2","doi-asserted-by":"crossref","unstructured":"Constantinos Patsakis Fran Casino and Nikolaos Lykousas. 2024. Assessing LLMs in malicious code deobfuscation of real-world malware campaigns. arXiv:2404.19715. Retrieved from https:\/\/arxiv.org\/abs\/2404.19715","DOI":"10.1016\/j.eswa.2024.124912"},{"key":"e_1_3_1_178_2","unstructured":"Aleksandr Pilgun Olga Gadyatskaya Stanislav Dashevskyi Yury Zhauniarovich and Artsiom Kushniarou. 2018. Fine-grained code coverage measurement in automated black-box Android testing. arXiv:1812.10729. Retrieved from http:\/\/arxiv.org\/abs\/1812.10729"},{"key":"e_1_3_1_179_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2014.13"},{"key":"e_1_3_1_180_2","doi-asserted-by":"publisher","DOI":"10.3390\/S22176679"},{"key":"e_1_3_1_181_2","first-page":"603","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security \u201919)","author":"Reardon Joel","year":"2019","unstructured":"Joel Reardon, \u00c1lvaro Feal, Primal Wijesekera, Amit Elazari Bar On, Narseo Vallina-Rodriguez, and Serge Egelman. 2019. 50 Ways to leak your data: An exploration of apps\u2019 circumvention of the Android permissions system. In Proceedings of the 28th USENIX Security Symposium (USENIX Security \u201919). Nadia Heninger and Patrick Traynor (Eds.), USENIX Association, 603\u2013620. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/reardon"},{"key":"e_1_3_1_182_2","unstructured":"Counterpoint Research. 2024. Global Smartphone Sales Share by Operating System. Retrieved May 15 2026 from https:\/\/www.counterpointresearch.com\/insights\/global-smartphone-os-market-share\/"},{"key":"e_1_3_1_183_2","unstructured":"Andrea Romdhana Alessio Merlo Mariano Ceccato and Paolo Tonella. 2021. Deep reinforcement learning for black-box testing of Android apps. arXiv:2101.02636. Retrieved from https:\/\/arxiv.org\/abs\/2101.02636"},{"key":"e_1_3_1_184_2","doi-asserted-by":"crossref","unstructured":"Pascal J. Sager Benjamin Meyer Peng Yan Rebekka von Wartburg-Kottler Layan Etaiwi Aref Enayati Gabriel Nobel Ahmed Abdulkadir Benjamin F. Grewe and Thilo Stadelmann. 2025. A comprehensive survey of agents for computer use: Foundations challenges and future directions. arXiv:2501.16150. Retrieved from https:\/\/arxiv.org\/abs\/2501.16150","DOI":"10.1613\/jair.1.19490"},{"key":"e_1_3_1_185_2","doi-asserted-by":"publisher","DOI":"10.1109\/TEM.2023.3235718"},{"key":"e_1_3_1_186_2","doi-asserted-by":"crossref","unstructured":"Jordan Samhi Jun Gao Nadia Daoudi Pierre Graux Henri Hoyez Xiaoyu Sun Kevin Allix Tegawend\u00e9 F. Bissyand\u00e9 and Jacques Klein. 2021. JuCify: A step towards Android code unification for enhanced static analysis. arXiv:2112.10469. Retrieved from https:\/\/arxiv.org\/abs\/2112.10469","DOI":"10.1145\/3510003.3512766"},{"key":"e_1_3_1_187_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2861405"},{"key":"e_1_3_1_188_2","unstructured":"Xinyue Shen Zeyuan Chen Michael Backes Yun Shen and Yang Zhang. 2023. \u201cDo anything now\u201d: Characterizing and evaluating in-the-wild jailbreak prompts on large language models. arXiv:2308.03825. Retrieved from https:\/\/arxiv.org\/abs\/2308.03825"},{"key":"e_1_3_1_189_2","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329801"},{"key":"e_1_3_1_190_2","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106298"},{"key":"e_1_3_1_191_2","unstructured":"Dewen Suo Lei Xue Runze Tan Weihao Huang and Guozi Sun. 2024. ARAP: Demystifying anti runtime analysis code in Android apps. arXiv:2408.11080. Retrieved from https:\/\/arxiv.org\/abs\/2408.11080"},{"key":"e_1_3_1_192_2","unstructured":"Xuchen Suo. 2024. Signed-prompt: A new approach to prevent prompt injection attacks against LLM-integrated applications. arXiv:2401.07612. Retrieved from https:\/\/arxiv.org\/abs\/2401.07612"},{"key":"e_1_3_1_193_2","first-page":"1","volume-title":"Proceedings of the Network and Distributed System Security (NDSS) Symposium","author":"Tam Kimberly","year":"2015","unstructured":"Kimberly Tam, Salahuddin J. Khan, Aristide Fattori, and Lorenzo Cavallaro. 2015. Copperdroid: Automatic reconstruction of Android malware behaviors. In Proceedings of the Network and Distributed System Security (NDSS) Symposium, 1\u201315."},{"key":"e_1_3_1_194_2","unstructured":"Hanzhuo Tan Qi Luo Jing Li and Yuqun Zhang. 2024. LLM4Decompile: Decompiling binary code with large language models. arXiv:2403.05286. Retrieved from https:\/\/arxiv.org\/abs\/2403.05286"},{"key":"e_1_3_1_195_2","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598120"},{"key":"e_1_3_1_196_2","unstructured":"Tencent. 2025. Tinker\u2014Android Hot-Fix Solution Library. Retrieved February 21 2025 from https:\/\/github.com\/Tencent\/tinker"},{"key":"e_1_3_1_197_2","doi-asserted-by":"publisher","DOI":"10.1109\/PIMRCW.2019.8880840"},{"key":"e_1_3_1_198_2","doi-asserted-by":"publisher","DOI":"10.1145\/2666620.2666630"},{"key":"e_1_3_1_199_2","doi-asserted-by":"publisher","DOI":"10.1145\/3715763"},{"key":"e_1_3_1_200_2","first-page":"6629","volume-title":"Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923)","author":"Wang Chao","year":"2023","unstructured":"Chao Wang, Yue Zhang, and Zhiqiang Lin. 2023. One size does not fit all: Uncovering and exploiting cross platform discrepant APIs in WeChat. In Proceedings of the 32nd USENIX Security Symposium (USENIX Security \u201923). Joseph A. Calandrino and Carmela Troncoso (Eds.), USENIX Association, 6629\u20136646. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/wang-chao"},{"key":"e_1_3_1_201_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00017"},{"key":"e_1_3_1_202_2","doi-asserted-by":"crossref","unstructured":"Dingbang Wang Yu Zhao Sidong Feng Zhaoxu Zhang William G. J. Halfond Chunyang Chen Xiaoxia Sun Jiangfan Shi and Tingting Yu. 2024. Feedback-driven automated whole bug report reproduction for Android apps. arXiv:2407.05165. Retrieved from https:\/\/arxiv.org\/abs\/2407.05165","DOI":"10.1145\/3650212.3680341"},{"key":"e_1_3_1_203_2","unstructured":"Haoran Wang Xiongxiao Xu Baixiang Huang and Kai Shu. 2025. Privacy-aware decoding: Mitigating privacy leakage of large language models in retrieval-augmented generation. arXiv:2508.03098. Retrieved from https:\/\/arxiv.org\/abs\/2508.03098"},{"key":"e_1_3_1_204_2","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680335"},{"key":"e_1_3_1_205_2","doi-asserted-by":"crossref","unstructured":"Junyang Wang Haiyang Xu Haitao Jia Xi Zhang Ming Yan Weizhou Shen Ji Zhang Fei Huang and Jitao Sang. 2024. Mobile-agent-v2: Mobile device operation assistant with effective navigation via multi-agent collaboration. arXiv:2406.01014. Retrieved from https:\/\/arxiv.org\/abs\/2406.01014","DOI":"10.52202\/079017-0088"},{"key":"e_1_3_1_206_2","unstructured":"Junyang Wang Haiyang Xu Jiabo Ye Ming Yan Weizhou Shen Ji Zhang Fei Huang and Jitao Sang. 2024. Mobile-agent: Autonomous multi-modal mobile device agent with visual perception. arXiv:2401.16158. Retrieved from https:\/\/arxiv.org\/abs\/2401.16158"},{"key":"e_1_3_1_207_2","doi-asserted-by":"publisher","DOI":"10.1145\/3489048.3530973"},{"key":"e_1_3_1_208_2","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180169"},{"key":"e_1_3_1_209_2","unstructured":"Shuai Wang Weiwen Liu Jingxuan Chen Weinan Gan Xingshan Zeng Shuai Yu Xinlong Hao Kun Shao Yasheng Wang and Ruiming Tang. 2024. GUI agents with foundation models: A comprehensive survey. arXiv:2411.04890. Retrieved from https:\/\/arxiv.org\/abs\/2411.04890"},{"key":"e_1_3_1_210_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464828"},{"key":"e_1_3_1_211_2","unstructured":"Yin Wang Ming Fan Junfeng Liu Junjie Tao Wuxia Jin Qi Xiong Yuhao Liu Qinghua Zheng and Ting Liu. 2023. Do as you say: Consistency detection of data practice in program code and privacy policy in mini-app. arXiv:2302.13860. Retrieved from https:\/\/arxiv.org\/abs\/2302.13860"},{"key":"e_1_3_1_212_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.JSS.2020.110609"},{"key":"e_1_3_1_213_2","unstructured":"Zhitao Wang Wei Wang Zirao Li Long Wang Can Yi Xinjie Xu Luyang Cao Hanjing Su Shouzhi Chen and Jun Zhou. 2024. XUAT-copilot: Multi-agent collaborative system for automated user acceptance testing with large language model. arXiv:2401.02705. Retrieved from https:\/\/arxiv.org\/abs\/2401.02705"},{"key":"e_1_3_1_214_2","unstructured":"Zhenhailong Wang Haiyang Xu Junyang Wang Xi Zhang Ming Yan Ji Zhang Fei Huang and Heng Ji. 2025. Mobile-agent-E: Self-evolving mobile assistant for complex tasks. arXiv:2501.11733. Retrieved from https:\/\/arxiv.org\/abs\/2501.11733"},{"key":"e_1_3_1_215_2","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660357"},{"key":"e_1_3_1_216_2","doi-asserted-by":"publisher","DOI":"10.1145\/3636534.3649379"},{"key":"e_1_3_1_217_2","volume-title":"Proceedings of the 26th Annual Network and Distributed System Security Symposium (NDSS \u201919)","author":"Wu Daoyuan","year":"2019","unstructured":"Daoyuan Wu, Debin Gao, Rocky K. C. Chang, En He, Eric K. T. Cheng, and Robert H. Deng. 2019. Understanding open ports in Android applications: Discovery, diagnosis, and security assessment. In Proceedings of the 26th Annual Network and Distributed System Security Symposium (NDSS \u201919). The Internet Society. Retrieved from https:\/\/www.ndss-symposium.org\/ndss-paper\/understanding-open-ports-in-android-applications-discovery-diagnosis-and-security-assessment\/"},{"key":"e_1_3_1_218_2","unstructured":"Fangzhou Wu Ethan Cecchetti and Chaowei Xiao. 2024. System-level defense against indirect prompt injection attacks: An information flow control perspective. arXiv:2409.19091. Retrieved from https:\/\/arxiv.org\/abs\/2409.19091"},{"key":"e_1_3_1_219_2","unstructured":"Liangxuan Wu Chao Wang Tianming Liu Yanjie Zhao and Haoyu Wang. 2025. From assistants to adversaries: Exploring the security risks of mobile LLM agents. arXiv:2505.12981. Retrieved from https:\/\/arxiv.org\/abs\/2505.12981"},{"key":"e_1_3_1_220_2","doi-asserted-by":"publisher","DOI":"10.1145\/3691621.3694952"},{"key":"e_1_3_1_221_2","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670340"},{"key":"e_1_3_1_222_2","unstructured":"Chejian Xu Mintong Kang Jiawei Zhang Zeyi Liao Lingbo Mo Mengqi Yuan Huan Sun and Bo Li. 2024. AdvWeb: Controllable black-box attacks on VLM-powered web agents. arXiv:2410.17401. Retrieved from https:\/\/arxiv.org\/abs\/2410.17401"},{"key":"e_1_3_1_223_2","doi-asserted-by":"publisher","DOI":"10.1109\/EUROSP.2018.00040"},{"key":"e_1_3_1_224_2","unstructured":"Minrui Xu Jiani Fan Xinyu Huang Conghao Zhou Jiawen Kang Dusit Niyato Shiwen Mao Zhu Han Xuemin Shen and Kwok-Yan Lam. 2025. Forewarned is forearmed: A survey on large language model-based agents in autonomous cyberattacks. arXiv:2505.12786. Retrieved from https:\/\/arxiv.org\/abs\/2505.1278"},{"key":"e_1_3_1_225_2","doi-asserted-by":"publisher","DOI":"10.1109\/TASE.2019.00-20"},{"key":"e_1_3_1_226_2","doi-asserted-by":"publisher","DOI":"10.1145\/3660826"},{"key":"e_1_3_1_227_2","doi-asserted-by":"crossref","unstructured":"Wenkai Yang Xiaohan Bi Yankai Lin Sishuo Chen Jie Zhou and Xu Sun. 2024. Watch out for your agents! Investigating backdoor threats to LLM-based agents. arXiv:2402.11208. Retrieved from https:\/\/arxiv.org\/abs\/2402.11208","DOI":"10.52202\/079017-3201"},{"key":"e_1_3_1_228_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.50"},{"key":"e_1_3_1_229_2","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560597"},{"key":"e_1_3_1_230_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833764"},{"key":"e_1_3_1_231_2","first-page":"21","volume-title":"Proceedings of the 34th USENIX Security Symposium (USENIX Security \u201925)","author":"Yao Yifan","year":"2025","unstructured":"Yifan Yao, Shawn McCollum, Zhibo Sun, and Yue Zhang. 2025. Easy as child\u2019s play: An empirical study on age verification of adult-oriented Android apps. In Proceedings of the 34th USENIX Security Symposium (USENIX Security \u201925). Lujo Bauer and Giancarlo Pellegrino (Eds.), USENIX Association, 21\u201339. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity25\/presentation\/yao-yifan"},{"key":"e_1_3_1_232_2","doi-asserted-by":"crossref","unstructured":"Alperen Yildiz Sin G. Teo Yiling Lou Yebo Feng Chong Wang and Dinil Mon Divakaran. 2025. Benchmarking LLMs and LLM-based agents in practical vulnerability detection for code repositories. arXiv:2503.03586. Retrieved from https:\/\/arxiv.org\/abs\/2503.03586","DOI":"10.18653\/v1\/2025.acl-long.1490"},{"key":"e_1_3_1_233_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICST60714.2024.00020"},{"key":"e_1_3_1_234_2","doi-asserted-by":"publisher","DOI":"10.1145\/3759425.3763379"},{"key":"e_1_3_1_235_2","volume-title":"Proceedings of the 32nd Annual Network and Distributed System Security Symposium (NDSS \u201925)","author":"Yue Chang","year":"2025","unstructured":"Chang Yue, Kai Chen, Zhixiu Guo, Jun Dai, Xiaoyan Sun, and Yi Yang. 2025. What\u2019s done is not what\u2019s claimed: Detecting and interpreting inconsistencies in app behaviors. In Proceedings of the 32nd Annual Network and Distributed System Security Symposium (NDSS \u201925). The Internet Society. Retrieved from https:\/\/www.ndss-symposium.org\/ndss-paper\/whats-done-is-not-whats-claimed-detecting-and-interpreting-inconsistencies-in-app-behaviors\/"},{"key":"e_1_3_1_236_2","unstructured":"Chi Zhang Zhao Yang Jiaxuan Liu Yucheng Han Xin Chen Zebiao Huang Bin Fu and Gang Yu. 2023. AppAgent: Multimodal agents as smartphone users. arXiv:2312.13771. Retrieved from https:\/\/arxiv.org\/abs\/2312.13771"},{"key":"e_1_3_1_237_2","unstructured":"Guangyu Zhang Xixuan Wang Shiyu Sun Peiyan Xiao Kun Sun and Yanhai Xiong. 2025. TraceRAG: A LLM-based framework for explainable Android malware detection and behavior analysis. arXiv:2509.08865. Retrieved from https:\/\/arxiv.org\/abs\/2509.08865"},{"key":"e_1_3_1_238_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2919796"},{"key":"e_1_3_1_239_2","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590312"},{"key":"e_1_3_1_240_2","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2019.2924677"},{"key":"e_1_3_1_241_2","doi-asserted-by":"crossref","unstructured":"Yuyang Zhang Kangjie Chen Xudong Jiang Yuxiang Sun Run Wang and Lina Wang. 2024. Towards action hijacking of large language model-based agent. arXiv:2412.10807. Retrieved from https:\/\/arxiv.org\/abs\/2412.10807","DOI":"10.3390\/app142310807"},{"key":"e_1_3_1_242_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00093"},{"key":"e_1_3_1_243_2","unstructured":"Yakun Zhang Chen Liu Xiaofei Xie Yun Lin Jin Song Dong Dan Hao and Lu Zhang. 2024. LLM-based abstraction and concretization for GUI test migration. arXiv:2409.05028. Retrieved from https:\/\/arxiv.org\/abs\/2409.05028"},{"key":"e_1_3_1_244_2","doi-asserted-by":"crossref","unstructured":"Wenxiang Zhao Juntao Wu and Zhaoyi Meng. 2024. AppPoet: Large language model based Android malware detection via multi-view prompt engineering. arXiv:2404.18816. Retrieved from https:\/\/arxiv.org\/abs\/2404.18816","DOI":"10.1016\/j.eswa.2024.125546"},{"key":"e_1_3_1_245_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3550049"},{"key":"e_1_3_1_246_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.COSE.2020.101821"},{"key":"e_1_3_1_247_2","doi-asserted-by":"publisher","DOI":"10.1145\/3643916.3644419"},{"key":"e_1_3_1_248_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3597221"},{"key":"e_1_3_1_249_2","unstructured":"Xin Zhou Sicong Cao Xiaobing Sun and David Lo. 2024. Large language model for vulnerability detection and repair: Literature review and the road ahead. arXiv:2404.02525. Retrieved from https:\/\/arxiv.org\/abs\/2404.02525"},{"key":"e_1_3_1_250_2","doi-asserted-by":"publisher","DOI":"10.2478\/POPETS-2019-0037"},{"key":"e_1_3_1_251_2","unstructured":"Andy Zou Zifan Wang J. Zico Kolter and Matt Fredrikson. 2023. Universal and transferable adversarial attacks on aligned language models. arXiv:2307.15043. Retrieved from https:\/\/arxiv.org\/abs\/2307.15043"}],"container-title":["ACM Transactions on Software Engineering and Methodology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3819579","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,21]],"date-time":"2026-08-21T16:19:21Z","timestamp":1787329161000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3819579"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,21]]},"references-count":250,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2026,9,30]]}},"alternative-id":["10.1145\/3819579"],"URL":"https:\/\/doi.org\/10.1145\/3819579","relation":{},"ISSN":["1049-331X","1557-7392"],"issn-type":[{"value":"1049-331X","type":"print"},{"value":"1557-7392","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,21]]},"assertion":[{"value":"2025-10-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-05-13","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-08-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}