{"id":"https://openalex.org/W2984550901","doi":"https://doi.org/10.1109/tdsc.2019.2950253","title":"Understanding Illicit UI in iOS apps Through Hidden UI Analysis","display_name":"Understanding Illicit UI in iOS apps Through Hidden UI Analysis","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2984550901","doi":"https://doi.org/10.1109/tdsc.2019.2950253","mag":"2984550901"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2019.2950253","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2950253","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/08888213.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/08888213.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082578648","display_name":"Yeonjoon Lee","orcid":"https://orcid.org/0000-0002-5010-8277"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yeonjoon Lee","raw_affiliation_strings":["Hanyang University, Seongdong-gu, Seoul, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hanyang University, Seongdong-gu, Seoul, South Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101479439","display_name":"Xueqiang Wang","orcid":"https://orcid.org/0000-0002-9038-4460"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xueqiang Wang","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084889167","display_name":"Xiaojing Liao","orcid":"https://orcid.org/0000-0001-7555-1673"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojing Liao","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100333239","display_name":"Xiaofeng Wang","orcid":"https://orcid.org/0000-0002-3583-369X"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"XiaoFeng Wang","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3095,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.60095188,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.9898266196250916},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7203012108802795},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.7027561664581299},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.6107566356658936},{"id":"https://openalex.org/keywords/app-store","display_name":"App store","score":0.598885715007782},{"id":"https://openalex.org/keywords/smartphone-app","display_name":"Smartphone app","score":0.44092318415641785},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4373813271522522},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4226914942264557},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2786070704460144}],"concepts":[{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.9898266196250916},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7203012108802795},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.7027561664581299},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6107566356658936},{"id":"https://openalex.org/C2779794324","wikidata":"https://www.wikidata.org/wiki/Q3814081","display_name":"App store","level":2,"score":0.598885715007782},{"id":"https://openalex.org/C3017619522","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Smartphone app","level":2,"score":0.44092318415641785},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4373813271522522},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4226914942264557},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2786070704460144},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2019.2950253","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2950253","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/08888213.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:iu.tind.io:3221","is_oa":true,"landing_page_url":"http://iu.tind.io/record/3221","pdf_url":null,"source":{"id":"https://openalex.org/S4306402656","display_name":"IUScholarWorks Open (Indiana University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I592451","host_organization_name":"Indiana University","host_organization_lineage":["https://openalex.org/I592451"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://iu.tind.io/record/3221","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2019.2950253","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2950253","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/08888213.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1118499023","display_name":null,"funder_award_id":"CNS-1801365","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G2190930083","display_name":null,"funder_award_id":"W911NF1610127","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G2200343379","display_name":null,"funder_award_id":"CNS-1801432","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G258122654","display_name":null,"funder_award_id":"HY-2019-N","funder_id":"https://openalex.org/F4320321142","funder_display_name":"Hanyang University"},{"id":"https://openalex.org/G3233594287","display_name":"SaTC: CORE: Medium: Collaborative: Understanding and Discovering Illicit Online Business Through Automatic Analysis of Online Text Traces","funder_award_id":"1801432","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3493062892","display_name":null,"funder_award_id":"CNS-1527141","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G3706321167","display_name":null,"funder_award_id":"CNS-1618493","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G3880459711","display_name":null,"funder_award_id":"CNS-1838083","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G4383059034","display_name":"SaTC: CORE: Medium: Collaborative: Understanding and Discovering Illicit Online Business Through Automatic Analysis of Online Text Traces","funder_award_id":"1801365","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5924096546","display_name":null,"funder_award_id":"HY-2019","funder_id":"https://openalex.org/F4320321142","funder_display_name":"Hanyang University"},{"id":"https://openalex.org/G6982404986","display_name":"TWC: Small: Understanding and Mitigating the Security Hazards of Mobile Fragmentation","funder_award_id":"1527141","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321142","display_name":"Hanyang University","ror":"https://ror.org/046865y68"},{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2984550901.pdf","grobid_xml":"https://content.openalex.org/works/W2984550901.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W79696261","https://openalex.org/W1437814062","https://openalex.org/W1438616768","https://openalex.org/W1555215938","https://openalex.org/W1710734607","https://openalex.org/W1880262756","https://openalex.org/W1977634174","https://openalex.org/W1993370323","https://openalex.org/W2000159976","https://openalex.org/W2019798206","https://openalex.org/W2027538101","https://openalex.org/W2055126077","https://openalex.org/W2105068202","https://openalex.org/W2141125339","https://openalex.org/W2170124365","https://openalex.org/W2220697891","https://openalex.org/W2510008933","https://openalex.org/W2514714814","https://openalex.org/W2514974017","https://openalex.org/W2518060702","https://openalex.org/W2613948935","https://openalex.org/W2741981662","https://openalex.org/W2791544114","https://openalex.org/W2966616345","https://openalex.org/W6603196380","https://openalex.org/W6628346335","https://openalex.org/W6628353899","https://openalex.org/W6633254993","https://openalex.org/W6637688222","https://openalex.org/W6639619044","https://openalex.org/W6766551748"],"related_works":["https://openalex.org/W3120409491","https://openalex.org/W2987094522","https://openalex.org/W3156967914","https://openalex.org/W2984550901","https://openalex.org/W2965126671","https://openalex.org/W4285782238","https://openalex.org/W2981113098","https://openalex.org/W2879220619","https://openalex.org/W2413218663","https://openalex.org/W2504138768"],"abstract_inverted_index":{"In":[0,25],"Chameleon":[1,36,133,147],"apps,":[2,37,128,134],"benign":[3,105],"UIs":[4,16],"are":[5,18,50],"displayed":[6],"during":[7],"Apple":[8,125],"App":[9,23,126,153],"vetting":[10,155],"while":[11],"their":[12],"hidden":[13,96],"potentially-harmful":[14],"illicit":[15,48],"(PHI-UI)":[17],"revealed":[19],"once":[20],"they":[21],"reached":[22],"Store.":[24],"this":[26],"article,":[27],"we":[28,129],"report":[29],"the":[30,47,67,73,88,104,152,176],"first":[31],"systematic":[32],"study":[33],"on":[34,41,54,87],"iOS":[35,78],"which":[38,135],"sheds":[39],"light":[40],"a":[42,60,70,158,179],"largely":[43],"overlooked":[44],"threat":[45],"that":[46,65,90,110,146],"activities":[49,162],"launched":[51],"solely":[52],"based":[53,86],"UI.":[55,106],"Our":[56,107,143],"research":[57],"employed":[58],"Chameleon-Hunter,":[59],"new":[61,132],"static":[62],"analysis":[63],"approach":[64,84],"determines":[66],"suspiciousness":[68],"of":[69,160],"PHI-UI":[71,91],"leveraging":[72],"semantic":[74,101],"features":[75],"generated":[76],"from":[77],"app":[79,181],"UI":[80],"and":[81,119,138,156,174],"metadata.":[82],"The":[83],"is":[85,94,112],"observation":[89],"not":[92],"only":[93],"structurally":[95],"but":[97],"also":[98],"has":[99],"notable":[100],"inconsistency":[102],"with":[103,170],"evaluation":[108],"shows":[109],"Chameleon-Hunter":[111],"highly":[113],"effective,":[114],"achieving":[115],"92.6":[116],"percent":[117,121],"precision":[118],"94.7":[120],"recall.":[122],"From":[123],"28K":[124],"Store":[127],"found":[130],"142":[131],"were":[136],"confirmed":[137],"promptly":[139],"removed":[140],"by":[141],"Apple.":[142],"work":[144],"reveals":[145],"apps":[148],"can":[149],"easily":[150],"bypass":[151],"store":[154],"conduct":[157],"set":[159],"suspicious":[161],"including":[163],"collecting":[164],"users'":[165],"private":[166],"information,":[167],"swindling":[168],"money":[169],"fake":[171],"monetary":[172],"services,":[173],"leading":[175],"user":[177],"to":[178],"pirated":[180],"store.":[182]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}
