{"id":"https://openalex.org/W2100149279","doi":"https://doi.org/10.1109/tdsc.2014.2366457","title":"Towards Automated Risk Assessment and Mitigation of Mobile Applications","display_name":"Towards Automated Risk Assessment and Mitigation of Mobile Applications","publication_year":2014,"publication_date":"2014-10-31","ids":{"openalex":"https://openalex.org/W2100149279","doi":"https://doi.org/10.1109/tdsc.2014.2366457","mag":"2100149279"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2014.2366457","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2014.2366457","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068706708","display_name":"Yiming Jing","orcid":null},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yiming Jing","raw_affiliation_strings":["Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ","Security Engineering for Future Computing (SEFCOM) Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ","institution_ids":["https://openalex.org/I55732556"]},{"raw_affiliation_string":"Security Engineering for Future Computing (SEFCOM) Laboratory","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025770693","display_name":"Gail\u2010Joon Ahn","orcid":"https://orcid.org/0000-0002-4271-1666"},"institutions":[{"id":"https://openalex.org/I276751011","display_name":"GfK (United States)","ror":"https://ror.org/00jprdp28","country_code":"US","type":"company","lineage":["https://openalex.org/I276751011","https://openalex.org/I4210167111"]},{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gail-Joon Ahn","raw_affiliation_strings":["GFS Technology, Inc","Security Engineering for Future Computing (SEFCOM) Laboratory, Arizona State University, Tempe, AZ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"GFS Technology, Inc","institution_ids":["https://openalex.org/I276751011"]},{"raw_affiliation_string":"Security Engineering for Future Computing (SEFCOM) Laboratory, Arizona State University, Tempe, AZ","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073603754","display_name":"Ziming Zhao","orcid":"https://orcid.org/0000-0002-4930-5556"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ziming Zhao","raw_affiliation_strings":["Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ","Security Engineering for Future Computing (SEFCOM) Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ","institution_ids":["https://openalex.org/I55732556"]},{"raw_affiliation_string":"Security Engineering for Future Computing (SEFCOM) Laboratory","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056657952","display_name":"Hongxin Hu","orcid":"https://orcid.org/0000-0001-8710-247X"},"institutions":[{"id":"https://openalex.org/I8078737","display_name":"Clemson University","ror":"https://ror.org/037s24f05","country_code":"US","type":"education","lineage":["https://openalex.org/I8078737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongxin Hu","raw_affiliation_strings":["Division of Computer Science, School of Computing, Clemson University, Clemson, SC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer Science, School of Computing, Clemson University, Clemson, SC","institution_ids":["https://openalex.org/I8078737"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.4758,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.93548387,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"12","issue":"5","first_page":"571","last_page":"584"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8254210352897644},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8252400159835815},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.6693776845932007},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.6539459228515625},{"id":"https://openalex.org/keywords/revocation","display_name":"Revocation","score":0.5880001783370972},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5713831186294556},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.504088282585144},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.4802725315093994},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4697941541671753},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.27886033058166504},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2424861490726471},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12226840853691101}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8254210352897644},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8252400159835815},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.6693776845932007},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.6539459228515625},{"id":"https://openalex.org/C2775892892","wikidata":"https://www.wikidata.org/wiki/Q6509517","display_name":"Revocation","level":3,"score":0.5880001783370972},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5713831186294556},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.504088282585144},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.4802725315093994},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4697941541671753},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.27886033058166504},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2424861490726471},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12226840853691101},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2014.2366457","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2014.2366457","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G8373102545","display_name":null,"funder_award_id":"CNS-0916688","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8985097758","display_name":null,"funder_award_id":"NRF-2014K1A1A2043029","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W12540587","https://openalex.org/W32581813","https://openalex.org/W79696261","https://openalex.org/W81879861","https://openalex.org/W154677184","https://openalex.org/W171045190","https://openalex.org/W187285683","https://openalex.org/W190551272","https://openalex.org/W195936129","https://openalex.org/W1865564993","https://openalex.org/W1963971515","https://openalex.org/W1986330503","https://openalex.org/W2003276999","https://openalex.org/W2007590415","https://openalex.org/W2014390890","https://openalex.org/W2021124779","https://openalex.org/W2026117671","https://openalex.org/W2033811191","https://openalex.org/W2041276426","https://openalex.org/W2047221353","https://openalex.org/W2058180826","https://openalex.org/W2060692877","https://openalex.org/W2086648145","https://openalex.org/W2105412867","https://openalex.org/W2112665044","https://openalex.org/W2114275288","https://openalex.org/W2140095007","https://openalex.org/W2156744053","https://openalex.org/W2158888459","https://openalex.org/W2163582407","https://openalex.org/W2164539435","https://openalex.org/W2168649891","https://openalex.org/W2172222246","https://openalex.org/W2339802317","https://openalex.org/W2369295637","https://openalex.org/W2399034518","https://openalex.org/W2399891510","https://openalex.org/W2405120356","https://openalex.org/W3022853033","https://openalex.org/W6600534484","https://openalex.org/W6603196380","https://openalex.org/W6603356336","https://openalex.org/W6607702499","https://openalex.org/W6639024520","https://openalex.org/W6708518901","https://openalex.org/W6712192629","https://openalex.org/W6712520696","https://openalex.org/W6714048833"],"related_works":["https://openalex.org/W2755037920","https://openalex.org/W2795289301","https://openalex.org/W2942525700","https://openalex.org/W2519688385","https://openalex.org/W366415247","https://openalex.org/W2444232594","https://openalex.org/W1981999315","https://openalex.org/W4312997015","https://openalex.org/W222494692","https://openalex.org/W2100149279"],"abstract_inverted_index":{"Mobile":[0],"operating":[1],"systems,":[2],"such":[3,73],"as":[4,168],"Apple's":[5],"iOS":[6],"and":[7,23,76,80,107,140,176,181],"Google's":[8],"Android,":[9],"have":[10],"supported":[11],"a":[12,74,78,115,130,163],"ballooning":[13],"market":[14],"of":[15,27,46,110,123,166,171,184],"feature-rich":[16],"mobile":[17,28,47,97,174],"applications.":[18,101,124],"However,":[19],"helping":[20],"users":[21],"understand":[22],"mitigate":[24],"security":[25],"risks":[26,93],"applications":[29,112,142],"is":[30],"still":[31],"an":[32,68,169],"ongoing":[33],"challenge.":[34],"While":[35],"recent":[36],"work":[37,52],"has":[38],"developed":[39],"various":[40],"techniques":[41],"to":[42,53,70,91,113],"reveal":[43],"suspicious":[44],"behaviors":[45,60,109,122],"applications,":[48,98],"there":[49],"exists":[50],"little":[51],"answer":[54],"the":[55,126,172],"following":[56],"question:":[57],"are":[58],"those":[59],"necessarily":[61],"inappropriate?":[62],"In":[63],"this":[64],"paper,":[65],"we":[66,149],"seek":[67],"approach":[69],"cope":[71],"with":[72,156],"challenge":[75],"present":[77],"continuous":[79],"automated":[81,157],"risk":[82,116,131,146,154],"assessment":[83,117],"framework":[84],"called":[85],"RiskMon":[86,102,128,152,167],"that":[87,119],"uses":[88],"machine-learned":[89],"ranking":[90],"assess":[92],"incurred":[94],"by":[95,143],"users'":[96,104],"especially":[99],"Android":[100,173],"combines":[103],"coarse":[105],"expectations":[106],"runtime":[108],"trusted":[111],"generate":[114],"baseline":[118],"captures":[120],"appropriate":[121],"With":[125],"baseline,":[127],"assigns":[129],"score":[132],"on":[133,137],"every":[134],"access":[135],"attempt":[136],"sensitive":[138],"information":[139],"ranks":[141],"their":[144],"cumulative":[145],"scores.":[147],"Furthermore,":[148],"demonstrate":[150],"how":[151],"supports":[153],"mitigation":[155],"permission":[158],"revocation.":[159],"We":[160],"also":[161],"discuss":[162],"proof-of-concept":[164],"implementation":[165],"extension":[170],"platform":[175],"provide":[177],"both":[178],"system":[179],"evaluation":[180],"usability":[182],"study":[183],"our":[185],"methodology.":[186]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":6}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}