{"id":"https://openalex.org/W7220899651","doi":"https://doi.org/10.1145/3843781.3844621","title":"Using LLM Agents for Security Testing of Compiled Mobile Applications","display_name":"Using LLM Agents for Security Testing of Compiled Mobile Applications","publication_year":2026,"publication_date":"2026-10-08","ids":{"openalex":"https://openalex.org/W7220899651","doi":"https://doi.org/10.1145/3843781.3844621"},"language":"en","primary_location":{"id":"doi:10.1145/3843781.3844621","doi":"https://doi.org/10.1145/3843781.3844621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3843781.3844621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3843781.3844621?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Workshop on Software Security Testing","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3843781.3844621?download=true","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5118648757","display_name":"Fabian Scherf","orcid":"https://orcid.org/0009-0007-8901-8045","observed_orcids":["https://orcid.org/0009-0007-8901-8045"]},"institutions":[{"id":"https://openalex.org/I4210133470","display_name":"Fraunhofer Institute for Secure Information Technology","ror":"https://ror.org/03qt2gs44","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210133470","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4210135606","display_name":"National Research Center for Applied Cybersecurity ATHENE","ror":"https://ror.org/0378v2g76","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210135606"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Fabian Scherf","raw_affiliation_strings":["ATHENE - National Research Center for Applied Cybersecurity, Darmstadt, Germany","Fraunhofer SIT, Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0009-0007-8901-8045","affiliations":[{"raw_affiliation_string":"ATHENE - National Research Center for Applied Cybersecurity, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210135606"]},{"raw_affiliation_string":"Fraunhofer SIT, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210133470"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5118648755","display_name":"Florian Magin","orcid":"https://orcid.org/0009-0003-2858-9873","observed_orcids":["https://orcid.org/0009-0003-2858-9873"]},"institutions":[{"id":"https://openalex.org/I4210133470","display_name":"Fraunhofer Institute for Secure Information Technology","ror":"https://ror.org/03qt2gs44","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210133470","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4210135606","display_name":"National Research Center for Applied Cybersecurity ATHENE","ror":"https://ror.org/0378v2g76","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210135606"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Florian Magin","raw_affiliation_strings":["ATHENE - National Research Center for Applied Cybersecurity, Darmstadt, Germany","Fraunhofer SIT, Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0009-0003-2858-9873","affiliations":[{"raw_affiliation_string":"ATHENE - National Research Center for Applied Cybersecurity, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210135606"]},{"raw_affiliation_string":"Fraunhofer SIT, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210133470"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.69625644,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.6615999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.6615999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1429000049829483,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.08820000290870667,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.9079999923706055},{"id":"https://openalex.org/keywords/security-testing","display_name":"security testing","score":0.9179999828338623},{"id":"https://openalex.org/keywords/ios-app","display_name":"iOS app","score":0.9589999914169312},{"id":"https://openalex.org/keywords/static-analysis-limitations","display_name":"static analysis limitations","score":0.6370000243186951}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6310999989509583},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.3506999909877777},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.325300008058548},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.30219998955726624},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28929999470710754},{"id":"https://openalex.org/C7166840","wikidata":"https://www.wikidata.org/wiki/Q1199682","display_name":"System testing","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.25529998540878296}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3843781.3844621","doi":"https://doi.org/10.1145/3843781.3844621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3843781.3844621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3843781.3844621?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Workshop on Software Security Testing","raw_type":"proceedings-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/525794","doi":null,"is_oa":true,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/525794","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"},{"id":"doi:10.24406/publica-10803","doi":"https://doi.org/10.24406/publica-10803","is_oa":true,"landing_page_url":"https://doi.org/10.24406/publica-10803","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Other"}],"best_oa_location":{"id":"doi:10.1145/3843781.3844621","doi":"https://doi.org/10.1145/3843781.3844621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3843781.3844621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3843781.3844621?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Workshop on Software Security Testing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7220899651.pdf","grobid_xml":"https://content.openalex.org/works/W7220899651.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W3086100325","https://openalex.org/W3091588759","https://openalex.org/W4387298393","https://openalex.org/W4411523122","https://openalex.org/W4411688736","https://openalex.org/W4412877164","https://openalex.org/W4415002686","https://openalex.org/W4415721987","https://openalex.org/W4415721997","https://openalex.org/W4416047719","https://openalex.org/W7128532971","https://openalex.org/W7160531382","https://openalex.org/W7204750392"],"related_works":["https://openalex.org/W7204750392","https://openalex.org/W4415916001","https://openalex.org/W7161152572","https://openalex.org/W4415016584","https://openalex.org/W7125980349","https://openalex.org/W7218273050","https://openalex.org/W7168044326","https://openalex.org/W7125483113","https://openalex.org/W7140324317","https://openalex.org/W4414875692"],"abstract_inverted_index":{"Security":[0],"testing":[1],"of":[2,15,37,54],"compiled":[3,52],"applications":[4],"is":[5],"crucial":[6],"for":[7],"organizations":[8],"to":[9,44,82,87],"assess":[10],"the":[11,16,23,35],"behavior":[12],"and":[13,48],"security":[14,46,73],"software":[17],"they":[18,65],"deploy":[19],"without":[20],"relying":[21],"on":[22],"vendor.":[24],"In":[25],"this":[26],"paper,":[27],"we":[28],"present":[29],"a":[30,55,79],"case":[31],"study":[32],"that":[33,71,77],"investigates":[34],"capability":[36],"autonomous":[38],"Large":[39],"Language":[40],"Model":[41],"(LLM)":[42],"agents":[43],"detect":[45],"weaknesses":[47],"compliance":[49],"risks":[50],"in":[51,75],"code":[53],"real-world":[56],"iOS":[57],"application.":[58],"These":[59],"application-layer":[60],"vulnerabilities":[61],"are":[62],"often":[63],"context-dependent:":[64],"arise":[66],"from":[67],"app":[68],"logic":[69],"patterns":[70],"violate":[72],"principles":[74],"ways":[76],"require":[78],"human-like":[80],"understanding":[81],"recognize,":[83],"making":[84],"them":[85],"resistant":[86],"detection":[88],"via":[89],"conventional":[90],"static":[91],"analysis":[92],"methods.":[93]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-10-09T00:00:00"}