{"id":"https://openalex.org/W2971244706","doi":"https://doi.org/10.1109/tdsc.2019.2936848","title":"Vulnerable Service Invocation And Countermeasures","display_name":"Vulnerable Service Invocation And Countermeasures","publication_year":2019,"publication_date":"2019-08-27","ids":{"openalex":"https://openalex.org/W2971244706","doi":"https://doi.org/10.1109/tdsc.2019.2936848","mag":"2971244706"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2019.2936848","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2936848","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065193413","display_name":"Huan Chang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huan Chang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060586167","display_name":"Lingguang Lei","orcid":"https://orcid.org/0000-0002-1936-0562"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingguang Lei","raw_affiliation_strings":["School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026728546","display_name":"Kun Sun","orcid":"https://orcid.org/0000-0003-4152-2107"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kun Sun","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101640450","display_name":"Yuewu Wang","orcid":"https://orcid.org/0009-0003-5170-1253"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"yuewu wang","raw_affiliation_strings":["School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033745290","display_name":"Jiwu Jing","orcid":"https://orcid.org/0000-0002-3409-6149"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Jing","raw_affiliation_strings":["School of Computer Science and Technology, University of Chinese Academy of Sciences, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115053616","display_name":"Yi He","orcid":"https://orcid.org/0000-0002-1807-4185"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi He","raw_affiliation_strings":["Data Assurance and Communication Security Research Center, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Assurance and Communication Security Research Center, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210126530"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115590563","display_name":"Pingjian Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pingjian Wang","raw_affiliation_strings":["School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3272,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.55092564,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7308139801025391},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4721883535385132},{"id":"https://openalex.org/keywords/invocation","display_name":"Invocation","score":0.44583770632743835},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4281925559043884},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3755009174346924},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.10610437393188477}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7308139801025391},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4721883535385132},{"id":"https://openalex.org/C2776527387","wikidata":"https://www.wikidata.org/wiki/Q1671839","display_name":"Invocation","level":2,"score":0.44583770632743835},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4281925559043884},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3755009174346924},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10610437393188477},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2019.2936848","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2936848","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5600000023841858,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G6550672976","display_name":null,"funder_award_id":"No.61802398","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W81879861","https://openalex.org/W1522939654","https://openalex.org/W1536098516","https://openalex.org/W1630356589","https://openalex.org/W1680232729","https://openalex.org/W1912565424","https://openalex.org/W1966023382","https://openalex.org/W1984879109","https://openalex.org/W1988036170","https://openalex.org/W1989255032","https://openalex.org/W1994588724","https://openalex.org/W2017025011","https://openalex.org/W2027538101","https://openalex.org/W2059610428","https://openalex.org/W2069959685","https://openalex.org/W2077202047","https://openalex.org/W2080573945","https://openalex.org/W2141554582","https://openalex.org/W2166743230","https://openalex.org/W2171240827","https://openalex.org/W2235876906","https://openalex.org/W2241404614","https://openalex.org/W2277576447","https://openalex.org/W2291203434","https://openalex.org/W2518060702","https://openalex.org/W2519966510","https://openalex.org/W2571682498","https://openalex.org/W2577540292","https://openalex.org/W2614073125","https://openalex.org/W2752019414","https://openalex.org/W2754152340","https://openalex.org/W2766073406","https://openalex.org/W2783487958","https://openalex.org/W2962746903","https://openalex.org/W2999585024","https://openalex.org/W4244726870","https://openalex.org/W4251541794","https://openalex.org/W6603356336","https://openalex.org/W6631222091","https://openalex.org/W6637412253","https://openalex.org/W6640059210","https://openalex.org/W6669987511","https://openalex.org/W6696346372","https://openalex.org/W6737931128","https://openalex.org/W6743648922","https://openalex.org/W6743866149","https://openalex.org/W6999986095"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W4255072433","https://openalex.org/W2527536206","https://openalex.org/W4233258402","https://openalex.org/W2460921780","https://openalex.org/W2489188378","https://openalex.org/W2586198568","https://openalex.org/W2231659815","https://openalex.org/W4243719422","https://openalex.org/W2808811202"],"abstract_inverted_index":{"Before":[0],"Android":[1,6,38,42],"5.0,":[2],"the":[3,17,41,51,71,91,98,116,125,139,147,159,185,198,201],"services":[4,56],"in":[5,138],"applications":[7,52,173],"can":[8,182],"be":[9,67],"invoked":[10],"either":[11],"explicitly":[12],"or":[13],"implicitly.":[14],"However,":[15,152],"since":[16,37],"implicit":[18,72],"service":[19,23,73,100,143,165,178],"invocations":[20,74,144,204],"may":[21],"suffer":[22],"hijacking":[24,166,179],"attacks":[25],"and":[26,49,121,205],"thus":[27],"lead":[28,183],"to":[29,69,75,89,112,146,163,177,184],"sensitive":[30,188],"data":[31],"leakage,":[32],"they":[33],"have":[34],"been":[35],"forbidden":[36,94,117,126,150,160],"5.0.":[39],"Thereafter":[40],"system":[43],"will":[44,66],"simply":[45],"throw":[46],"an":[47],"exception":[48],"crash":[50],"that":[53,59,63,158,170],"still":[54,175],"invokes":[55],"implicitly,":[57],"so":[58],"it":[60],"was":[61],"expected":[62],"application":[64],"developers":[65],"forced":[68],"convert":[70],"explicit":[76],"ones.":[77],"In":[78],"this":[79],"paper,":[80],"we":[81,156,196],"develop":[82],"a":[83,135],"static":[84],"analysis":[85,133],"framework":[86],"called":[87],"ISA":[88],"analyze":[90,197],"effectiveness":[92],"of":[93,141,149,187,200],"policy":[95,118,127,161],"on":[96],"removing":[97],"vulnerable":[99,142,176,203],"invocations.":[101],"We":[102,168],"collect":[103],"two":[104,208],"datasets":[105],"containing":[106],"common":[107],"1390":[108],"apps":[109],"downloaded":[110],"1":[111],"3":[113],"months":[114,123],"before":[115],"is":[119,128],"enforced":[120],"30":[122],"after":[124],"enforced,":[129],"respectively.":[130],"Our":[131],"preliminary":[132],"indicates":[134],"82.58%":[136],"reduction":[137],"number":[140],"due":[145],"enforcement":[148],"policy.":[151],"upon":[153],"further":[154],"investigation,":[155],"discover":[157],"fails":[162],"resolve":[164],"attacks.":[167],"find":[169],"36":[171],"popular":[172],"are":[174],"attacks,":[180],"which":[181],"leakage":[186],"information":[189],"such":[190],"as":[191],"user":[192],"login":[193],"credential.":[194],"Finally,":[195],"reasons":[199],"residue":[202],"then":[206],"propose":[207],"countermeasures.":[209]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}