On the public citation graph

Automatically securing permission-based software by reducing the attack surface: an application to Android

https://doi.org/10.1145/2351676.2351722
0 signed · 147 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/sec.360openalex-snapshot
Semantically rich application‐centric security in Android
inferredcites →https://doi.org/10.1007/3-540-36579-6_12openalex-snapshot
Scaling Java Points-to Analysis Using Spark
inferredcites →https://doi.org/10.1007/978-3-642-18178-8_29openalex-snapshot
CRePE: Context-Related Policy Enforcement for Android
inferredcites →https://doi.org/10.1007/978-3-642-18178-8_30openalex-snapshot
Privilege Escalation Attacks on Android
inferredcites →https://doi.org/10.1109/csit.1975.6498831openalex-snapshot
Protection of information in computer systems
inferredcites →https://doi.org/10.1109/icse.2007.98openalex-snapshot
When Role Models Have Flaws: Static Validation of Enterprise Security Policies
inferredcites →https://doi.org/10.1109/icse.2009.5070519openalex-snapshot
Modular string-sensitive permission analysis with demand-driven precision
inferredcites →https://doi.org/10.1109/msp.2009.26openalex-snapshot
Understanding Android Security
inferredcites →https://doi.org/10.1109/proc.1975.9939openalex-snapshot
The protection of information in computer systems
inferredcites →https://doi.org/10.1109/sp.2012.24openalex-snapshot
User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems
inferredcites →https://doi.org/10.1109/tse.2010.60openalex-snapshot
An Attack Surface Metric
inferredcites →https://doi.org/10.1145/1146238.1146253openalex-snapshot
Role-Based access control consistency validation
inferredcites →https://doi.org/10.1145/1653662.1653691openalex-snapshot
On lightweight mobile phone application certification
inferredcites →https://doi.org/10.1145/1755688.1755732openalex-snapshot
Apex
inferredcites →https://doi.org/10.1145/1866307.1866317openalex-snapshot
A methodology for empirical analysis of permission-based security models and its application to android
inferredcites →https://doi.org/10.1145/2046707.2046779openalex-snapshot
Android permissions demystified
inferredcites →https://doi.org/10.1145/2351676.2351722openalex-snapshot
Automatically securing permission-based software by reducing the attack surface: an application to Android
inferredcites →https://doi.org/10.1145/582419.582452openalex-snapshot
Access rights analysis for Java
inferredcites →https://doi.org/10.1145/583854.582452openalex-snapshot
Access rights analysis for Java
inferredcites →https://doi.org/10.3929/ethz-a-006936208openalex-snapshot
Application Collusion Attack on the Permission-Based Security Model and its Implications for Modern Smartphone Systems
inferredcites →https://doi.org/10.48550/arxiv.0912.5101openalex-snapshot
Google Android: A State-of-the-Art Review of Security Mechanisms
inferredcites →https://doi.org/10.48550/arxiv.1102.2445openalex-snapshot
Quire: Lightweight Provenance for Smart Phone Operating Systems

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.2139/ssrn.4139896openalex-extracted
inferred← citeshttps://doi.org/10.1002/sec.1466openalex-snapshot
Taming transitive permission attack via bytecode rewriting on Android application
inferred← citeshttps://doi.org/10.1002/spe.2417openalex-snapshot
Frameworks compiled from declarations: a language‐independent approach
inferred← citeshttps://doi.org/10.1007/978-3-030-02744-5_5openalex-snapshot
A Comprehensive Study of Permission Usage on Android
inferred← citeshttps://doi.org/10.1007/978-3-030-12385-7_69openalex-snapshot
Closer Look at Mobile Hybrid Apps Configurations: Statistics and Implications
inferred← citeshttps://doi.org/10.1007/978-3-030-22479-0_18openalex-snapshot
CASFinder: Detecting Common Attack Surface
inferred← citeshttps://doi.org/10.1007/978-3-319-01433-3_3openalex-snapshot
Increasing Android Security Using a Lightweight OVAL-Based Vulnerability Assessment Framework
inferred← citeshttps://doi.org/10.1007/978-3-319-04283-1_5openalex-snapshot
Contrasting Permission Patterns between Clean and Malicious Android Applications
inferred← citeshttps://doi.org/10.1007/978-3-319-11203-9_10openalex-snapshot
DroidMiner: Automated Mining and Characterization of Fine-grained Malicious Behaviors in Android Applications
inferred← citeshttps://doi.org/10.1007/978-3-319-17533-1_25openalex-snapshot
Comprehensive Analysis of the Android Google Play’s Auto-update Policy
inferred← citeshttps://doi.org/10.1007/978-3-319-26555-1_75openalex-snapshot
Fine-Grained Risk Level Quantication Schemes Based on APK Metadata
inferred← citeshttps://doi.org/10.1007/978-3-319-45719-2_16openalex-snapshot
Small Changes, Big Changes: An Updated View on the Android Permission System
inferred← citeshttps://doi.org/10.1007/978-3-319-61204-1_5openalex-snapshot
No Free Charge Theorem: A Covert Channel via USB Charging Cable on Mobile Devices
inferred← citeshttps://doi.org/10.1007/978-3-319-71501-8_4openalex-snapshot
Hey Doc, Is This Normal?: Exploring Android Permissions in the Post Marshmallow Era
inferred← citeshttps://doi.org/10.1007/978-3-642-41205-9_2openalex-snapshot
Security and Privacy in Mobile Cloud Under a Citizen’s Perspective
inferred← citeshttps://doi.org/10.1007/978-3-642-45204-8_23openalex-snapshot
Let the Right One in: Discovering and Mitigating Permission Gaps
inferred← citeshttps://doi.org/10.1007/978-981-15-1304-6_28openalex-snapshot
A Light-Weight Framework for Pre-submission Vetting of Android Applications in App Stores
inferred← citeshttps://doi.org/10.1007/s10009-016-0441-2openalex-snapshot
A high-level modeling language for the efficient design, implementation, and testing of Android applications
inferred← citeshttps://doi.org/10.1007/s10207-014-0260-yopenalex-snapshot
Understanding the implemented access control policy of Android system services with slicing and extended static checking
inferred← citeshttps://doi.org/10.1007/s10515-019-00254-6openalex-snapshot
Automatic, highly accurate app permission recommendation
inferred← citeshttps://doi.org/10.1007/s10664-020-09877-wopenalex-snapshot
API compatibility issues in Android: Causes and effectiveness of data-driven detection techniques
inferred← citeshttps://doi.org/10.1007/s10796-022-10328-8openalex-snapshot
DyPolDroid: Protecting Against Permission-Abuse Attacks in Android
inferred← citeshttps://doi.org/10.1007/s11042-017-4586-0openalex-snapshot
Bio-inspired computational paradigm for feature investigation and malware detection: interactive analytics
inferred← citeshttps://doi.org/10.1007/s11277-015-2478-zopenalex-snapshot
Multi-Metrics Approach for Security, Privacy and Dependability in Embedded Systems
inferred← citeshttps://doi.org/10.1007/s11704-018-7451-zopenalex-snapshot
TPII: tracking personally identifiable information via user behaviors in HTTP traffic
inferred← citeshttps://doi.org/10.1007/s41635-018-0053-2openalex-snapshot
Unravelling Security Issues of Runtime Permissions in Android
inferred← citeshttps://doi.org/10.1007/s42452-019-1124-xopenalex-snapshot
The Android malware detection systems between hope and reality
inferred← citeshttps://doi.org/10.1016/j.cose.2014.10.005openalex-snapshot
A Permission verification approach for android mobile applications
inferred← citeshttps://doi.org/10.1016/j.cose.2017.07.002openalex-snapshot
Android inter-app communication threats and detection techniques
inferred← citeshttps://doi.org/10.1016/j.eij.2025.100834openalex-snapshot
Wordcloud: Detecting mobile malware with deep learning and word of cloud
inferred← citeshttps://doi.org/10.1016/j.future.2013.09.014openalex-snapshot
Mining permission patterns for contrasting clean and malicious android applications
inferred← citeshttps://doi.org/10.1016/j.future.2018.05.047openalex-snapshot
SneakLeak+: Large-scale klepto apps analysis
inferred← citeshttps://doi.org/10.1016/j.infsof.2017.04.001openalex-snapshot
Static analysis of android apps: A systematic literature review
inferred← citeshttps://doi.org/10.1016/j.infsof.2018.07.008openalex-snapshot
Attack surface definitions: A systematic literature review
inferred← citeshttps://doi.org/10.1016/j.neucom.2014.10.004openalex-snapshot
Android based malware detection using a multifeature collaborative decision fusion approach
inferred← citeshttps://doi.org/10.1109/access.2018.2883975openalex-snapshot
Android Malware Permission-Based Multi-Class Classification Using Extremely Randomized Trees
inferred← citeshttps://doi.org/10.1109/access.2020.3045972openalex-snapshot
Analytical Review of Cybersecurity for Embedded Systems
inferred← citeshttps://doi.org/10.1109/access.2021.3088229openalex-snapshot
Penetration Frameworks and Development Issues in Secure Mobile Application Development: A Systematic Literature Review
inferred← citeshttps://doi.org/10.1109/aeeca62331.2024.00086openalex-snapshot
SELMAnalyzer: An APP Privacy Leakage Analysis Method Based on Program Execution Logic
inferred← citeshttps://doi.org/10.1109/apsec.2016.037openalex-snapshot
Testing Android Apps via Guided Gesture Event Generation
inferred← citeshttps://doi.org/10.1109/apsec51365.2020.00046openalex-snapshot
Don't Trust Me, Test Me: 100% Code Coverage for a 3rd-party Android App
inferred← citeshttps://doi.org/10.1109/ase.2013.6693092openalex-snapshot
Finding architectural flaws using constraints
inferred← citeshttps://doi.org/10.1109/ccet.2018.8542215openalex-snapshot
A Two-Layered Malware Detection Model Based on Permission for Android
inferred← citeshttps://doi.org/10.1109/emes52337.2021.9484128openalex-snapshot
Android social applications permission overview from a privacy perspective
inferred← citeshttps://doi.org/10.1109/fskd.2016.7603436openalex-snapshot
Data security of Android applications
inferred← citeshttps://doi.org/10.1109/glocom.2014.7417621openalex-snapshot
Reevaluating Android Permission Gaps with Static and Dynamic Analysis
inferred← citeshttps://doi.org/10.1109/glocom.2015.7417621openalex-snapshot
Reevaluating Android Permission Gaps with Static and Dynamic Analysis
inferred← citeshttps://doi.org/10.1109/honet.2017.8102211openalex-snapshot
Toward objective security measurability and manageability
inferred← citeshttps://doi.org/10.1109/iacs.2017.7921989openalex-snapshot
A framework for measurability of security
inferred← citeshttps://doi.org/10.1109/icaiccit60255.2023.10466166openalex-snapshot
Data Extraction, Attacks and Protection on Android Clipboard
inferred← citeshttps://doi.org/10.1109/iccsnt.2012.6525958openalex-snapshot
Vulnerability monitoring mechanism in Android based smartphone with correlation analysis on event-driven activities
inferred← citeshttps://doi.org/10.1109/icse.2015.48openalex-snapshot
IccTA: Detecting Inter-Component Privacy Leaks in Android Apps
inferred← citeshttps://doi.org/10.1109/icse43902.2021.00121openalex-snapshot
Containing Malicious Package Updates in npm with a Lightweight Permission System
inferred← citeshttps://doi.org/10.1109/iwci.2016.7860330openalex-snapshot
An android based security alert system for female
inferred← citeshttps://doi.org/10.1109/mass66014.2025.00090openalex-snapshot
We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems
inferred← citeshttps://doi.org/10.1109/mobilesoft.2015.8openalex-snapshot
A Recommender System of Buggy App Checkers for App Store Moderators
inferred← citeshttps://doi.org/10.1109/msr.2017.64openalex-snapshot
How Do Apps Evolve in Their Permission Requests? A Preliminary Study
inferred← citeshttps://doi.org/10.1109/pccc.2016.7820624openalex-snapshot
Detecting and defending against inter-app permission leaks in android apps
inferred← citeshttps://doi.org/10.1109/pst.2016.7906949openalex-snapshot
Attacking Android smartphone systems without permissions
inferred← citeshttps://doi.org/10.1109/saner48275.2020.9054795openalex-snapshot
Heap Memory Snapshot Assisted Program Analysis for Android Permission Specification
inferred← citeshttps://doi.org/10.1109/seaa56994.2022.00039openalex-snapshot
A Preliminary Conceptualization and Analysis on Automated Static Analysis Tools for Vulnerability Detection in Android Apps
inferred← citeshttps://doi.org/10.1109/secon.2017.7925374openalex-snapshot
SACH: A tool for assisting Secure Android application development
inferred← citeshttps://doi.org/10.1109/snpd.2016.7515959openalex-snapshot
Research on non-authorized privilege escalation detection of android applications
inferred← citeshttps://doi.org/10.1109/sp.2019.00054openalex-snapshot
Demystifying Hidden Privacy Settings in Mobile Apps
inferred← citeshttps://doi.org/10.1109/tdsc.2015.2479613openalex-snapshot
A Secure, Usable, and Transparent Middleware for Permission Managers on Android
inferred← citeshttps://doi.org/10.1109/tdsc.2018.2889086openalex-snapshot
Network Attack Surface: Lifting the Concept of Attack Surface to the Network Level for Evaluating Networks’ Resilience Against Zero-Day Attacks
inferred← citeshttps://doi.org/10.1109/tdsc.2021.3129116openalex-snapshot
SkillVet: Automated Traceability Analysis of Amazon Alexa Skills
inferred← citeshttps://doi.org/10.1109/tifs.2019.2894356openalex-snapshot
Musti: Dynamic Prevention of Invalid Object Initialization Attacks
inferred← citeshttps://doi.org/10.1109/tmc.2017.2762692openalex-snapshot
DELTA: Data Extraction and Logging Tool for Android
inferred← citeshttps://doi.org/10.1109/tr.2017.2778147openalex-snapshot
MalPat: Mining Patterns of Malicious and Benign Android Apps via Permission-Related APIs
inferred← citeshttps://doi.org/10.1109/trustcom.2014.50openalex-snapshot
Automatically Exploiting Potential Component Leaks in Android Applications
inferred← citeshttps://doi.org/10.1109/tse.2014.2322867openalex-snapshot
Static Analysis for Extracting Permission Checks of a Large Scale Framework: The Challenges and Solutions for Analyzing Android
inferred← citeshttps://doi.org/10.1109/tse.2016.2615307openalex-snapshot
A Taxonomy and Qualitative Comparison of Program Analysis Techniques for Security Assessment of Android Software
inferred← citeshttps://doi.org/10.1109/tse.2022.3148258openalex-snapshot
Runtime Permission Issues in Android Apps: Taxonomy, Practices, and Ways Forward
inferred← citeshttps://doi.org/10.1145/2382196.2382222openalex-snapshot
PScout
inferred← citeshttps://doi.org/10.1145/2568225.2568276openalex-snapshot
Checking app behavior against app descriptions
inferred← citeshttps://doi.org/10.1145/2594291.2594299openalex-snapshot
FlowDroid
inferred← citeshttps://doi.org/10.1145/2666356.2594299openalex-snapshot
FlowDroid
inferred← citeshttps://doi.org/10.1145/2699026.2699105openalex-snapshot
StaDynA
inferred← citeshttps://doi.org/10.1145/2750858.2805833openalex-snapshot
Using text mining to infer the purpose of permission use in mobile apps
inferred← citeshttps://doi.org/10.1145/2786805.2786829openalex-snapshot
Getting to know you: towards a capability model for Java
inferred← citeshttps://doi.org/10.1145/2884781.2884782openalex-snapshot
Mining sandboxes
inferred← citeshttps://doi.org/10.1145/2906388.2906409openalex-snapshot
Privacy Capsules
inferred← citeshttps://doi.org/10.1145/2912160.2912186openalex-snapshot
Improving Security Awareness in the Government Sector
inferred← citeshttps://doi.org/10.1145/2996358openalex-snapshot
*droid
inferred← citeshttps://doi.org/10.1145/3278532.3278558openalex-snapshot
Beyond Google Play
inferred← citeshttps://doi.org/10.1145/3428203openalex-snapshot
Automated policy synthesis for system call sandboxing
inferred← citeshttps://doi.org/10.1145/3510003.3510074openalex-snapshot
Aper
inferred← citeshttps://doi.org/10.1145/3517745.3561433openalex-snapshot
Exploring the security and privacy risks of chatbots in messaging services
inferred← citeshttps://doi.org/10.1145/3532105.3535016openalex-snapshot
A Study of Application Sandbox Policies in Linux
inferred← citeshttps://doi.org/10.1145/3617072.3617102openalex-snapshot
Assessing Security, Privacy, User Interaction, and Accessibility Features in Popular E-Payment Applications
inferred← citeshttps://doi.org/10.1147/jrd.2013.2284403openalex-snapshot
Automatic detection of inter-application permission leaks in Android applications
inferred← citeshttps://doi.org/10.1186/s13174-021-00134-xopenalex-snapshot
Software engineering techniques for statically analyzing mobile apps: research trends, characteristics, and potential for industrial adoption
inferred← citeshttps://doi.org/10.13052/jcsm2245-1439.342openalex-snapshot
Measurable Security, Privacy and Dependability in Smart Grids
inferred← citeshttps://doi.org/10.13089/jkiisc.2013.23.3.479openalex-snapshot
Android based Mobile Device Rooting Attack Detection and Response Mechanism using Events Extracted from Daemon Processes
inferred← citeshttps://doi.org/10.1371/journal.pone.0238694openalex-snapshot
A detection method for android application security based on TF-IDF and machine learning
inferred← citeshttps://doi.org/10.14569/ijacsa.2017.080411openalex-snapshot
Using Weighted Bipartite Graph for Android Malware Classification
inferred← citeshttps://doi.org/10.14722/ndss.2014.23039openalex-snapshot
A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks
inferred← citeshttps://doi.org/10.1504/ijes.2016.073752openalex-snapshot
Identifying malicious Android apps using permissions and system events
inferred← citeshttps://doi.org/10.1631/fitee.1601491openalex-snapshot
Discovering optimal features using static analysis and a genetic search based method for Android malware detection
inferred← citeshttps://doi.org/10.20868/upm.thesis.57886openalex-snapshot
Understanding the Evolution of Android Applications
inferred← citeshttps://doi.org/10.26483/ijarcs.v8i7.4212openalex-snapshot
SCRUTINIZING PERMISSION BASED ATTACK ON ANDROID OS PLATFORM DEVICES
inferred← citeshttps://doi.org/10.3390/app9183699openalex-snapshot
PerHelper: Helping Developers Make Better Decisions on Permission Uses in Android Apps
inferred← citeshttps://doi.org/10.3390/fi14080238openalex-snapshot
Will Zero Vulnerability Computing (ZVC) Ever Be Possible? Testing the Hypothesis
inferred← citeshttps://doi.org/10.4108/icst.collaboratecom.2013.254209openalex-snapshot
Android Keylogging Threat
inferred← citeshttps://doi.org/10.4236/cn.2017.93014openalex-snapshot
DroidData: Tracking and Monitoring Data Transmission in the Android Operating System
inferred← citeshttps://doi.org/10.48550/arxiv.1208.4536openalex-snapshot
In-Vivo Bytecode Instrumentation for Improving Privacy on Android Smartphones in Uncertain Environments
inferred← citeshttps://doi.org/10.48550/arxiv.1504.05967openalex-snapshot
Finding Tizen security bugs through whole-system static analysis
inferred← citeshttps://doi.org/10.48550/arxiv.1706.05042openalex-snapshot
DPerm: Assisting the Migration of Android Apps to Runtime Permissions
inferred← citeshttps://doi.org/10.5121/ijsea.2020.11201openalex-snapshot
Essential Activities for Secure Software Development
inferred← citeshttps://doi.org/10.5445/ir/1000050251openalex-snapshot
Attack Surface Reduction for Web Services based on Authorization Patterns
inferred← citeshttps://doi.org/10.58729/1941-6679.1052openalex-snapshot
Mobile App Installation: the Role of Precautions and Desensitization
inferred← citeshttps://doi.org/10.70675/79947114z9db5z41ebzb996z0f625c151519openalex-snapshot
Towards improving the quality of mobile app by leveraging crowdsourced feedback
inferred← citeshttps://doi.org/10.70675/8d5b7e9dz673ez403dz99e2z316f6ef5dde1openalex-snapshot
A language-independent methodology for compiling declarations into open platform frameworks
inferred← citeshttps://doi.org/10.70675/bc64e831z082ez45e9z81dazf5db6bf6719dopenalex-snapshot
Vulnerability management for safe configurations in autonomic networks and systems
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.1/reviews/1openalex-snapshot
Peer Review #1 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.1)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.1/reviews/2openalex-snapshot
Peer Review #2 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.1)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.2/reviews/2openalex-snapshot
Peer Review #2 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.2)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.2/reviews/3openalex-snapshot
Peer Review #3 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.2)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.3/reviews/1openalex-snapshot
Peer Review #1 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.3)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.3/reviews/2openalex-snapshot
Peer Review #2 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.3)"
inferred← citeshttps://doi.org/10.7287/peerj-cs.522v0.3/reviews/3openalex-snapshot
Peer Review #3 of "Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation) (v0.3)"
inferred← citeshttps://doi.org/10.7717/peerj-cs.522openalex-snapshot
Malware detection using static analysis in Android: a review of FeCO (features, classification, and obfuscation)
inferred← citeshttps://doi.org/10.9790/0661-1335358openalex-snapshot
A Framework for Providing Selective Permissions to Android Applications
showing the first 124 of 125
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.