{"id":"https://openalex.org/W3120715358","doi":"https://doi.org/10.1109/tdsc.2021.3050188","title":"Orchestration or Automation: Authentication Flaw Detection in Android Apps","display_name":"Orchestration or Automation: Authentication Flaw Detection in Android Apps","publication_year":2021,"publication_date":"2021-01-09","ids":{"openalex":"https://openalex.org/W3120715358","doi":"https://doi.org/10.1109/tdsc.2021.3050188","mag":"3120715358"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2021.3050188","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3050188","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=8654&context=sis_research","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016972157","display_name":"Siqi Ma","orcid":"https://orcid.org/0000-0003-3479-5713"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siqi Ma","raw_affiliation_strings":["Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3479-5713","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I165143802","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020082816","display_name":"Juanru Li","orcid":"https://orcid.org/0000-0002-7978-595X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Juanru Li","raw_affiliation_strings":["Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3289-6599","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I165143802","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113666845","display_name":"Diethelm Ostry","orcid":null},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Diethelm Ostry","raw_affiliation_strings":["Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, University of Queensland, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I165143802","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081036622","display_name":"David Lo","orcid":"https://orcid.org/0000-0002-4367-7201"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"David Lo","raw_affiliation_strings":["Singapore Management University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4367-7201","affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015261020","display_name":"Sanjay Jha","orcid":"https://orcid.org/0000-0002-1844-1520"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sanjay Kumar Jha","raw_affiliation_strings":["University of New South Wales Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1844-1520","affiliations":[{"raw_affiliation_string":"University of New South Wales Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001712801","display_name":"Robert H. Deng","orcid":"https://orcid.org/0000-0003-3491-8146"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Robert H. Deng","raw_affiliation_strings":["Singapore Management University, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-3491-8146","affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061694501","display_name":"Elisa Bertino","orcid":"https://orcid.org/0000-0002-4029-7051"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elisa Bertino","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0002-4029-7051","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.557,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.62993582,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"19","issue":"4","first_page":"2165","last_page":"2178"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.759676992893219},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7174816131591797},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.559725821018219},{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.5567853450775146},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5103132128715515},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5049579739570618},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.46941623091697693},{"id":"https://openalex.org/keywords/timestamp","display_name":"Timestamp","score":0.42618048191070557},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4176710844039917},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30054765939712524},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.21858060359954834},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12397229671478271}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.759676992893219},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7174816131591797},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.559725821018219},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.5567853450775146},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5103132128715515},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5049579739570618},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.46941623091697693},{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.42618048191070557},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4176710844039917},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30054765939712524},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.21858060359954834},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12397229671478271},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2021.3050188","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3050188","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-8654","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=8654&context=sis_research","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TDSC.2021.3050188","raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-8654","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=8654&context=sis_research","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TDSC.2021.3050188","raw_type":"Journal Article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2003762198","display_name":null,"funder_award_id":"62002222","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W615016617","https://openalex.org/W1533182289","https://openalex.org/W1577581905","https://openalex.org/W1599351585","https://openalex.org/W1680392829","https://openalex.org/W1915915253","https://openalex.org/W1968854550","https://openalex.org/W1976919795","https://openalex.org/W1987185773","https://openalex.org/W2008810193","https://openalex.org/W2024205760","https://openalex.org/W2045057497","https://openalex.org/W2080696000","https://openalex.org/W2083160690","https://openalex.org/W2096938398","https://openalex.org/W2103370348","https://openalex.org/W2108827856","https://openalex.org/W2111303254","https://openalex.org/W2113446256","https://openalex.org/W2127637733","https://openalex.org/W2133432179","https://openalex.org/W2163049969","https://openalex.org/W2293618135","https://openalex.org/W2320204756","https://openalex.org/W2507568508","https://openalex.org/W2538556898","https://openalex.org/W2549114820","https://openalex.org/W2562086057","https://openalex.org/W2672575173","https://openalex.org/W2730608559","https://openalex.org/W2734542274","https://openalex.org/W2735733036","https://openalex.org/W2736179236","https://openalex.org/W2761748950","https://openalex.org/W2765164964","https://openalex.org/W2766106797","https://openalex.org/W2772422830","https://openalex.org/W2790835090","https://openalex.org/W2791018263","https://openalex.org/W2793157084","https://openalex.org/W2882992559","https://openalex.org/W2964160436","https://openalex.org/W2973220656","https://openalex.org/W3101072679","https://openalex.org/W3101228802","https://openalex.org/W3127736190","https://openalex.org/W4302435280","https://openalex.org/W6611108959","https://openalex.org/W6635935588","https://openalex.org/W6637386731","https://openalex.org/W6640203312","https://openalex.org/W6696642037","https://openalex.org/W6749470980","https://openalex.org/W6785453403","https://openalex.org/W6790047161"],"related_works":["https://openalex.org/W79913212","https://openalex.org/W2094884983","https://openalex.org/W2060561905","https://openalex.org/W2378898096","https://openalex.org/W560952460","https://openalex.org/W2290927522","https://openalex.org/W4283579741","https://openalex.org/W1417711376","https://openalex.org/W3066706303","https://openalex.org/W2143369109"],"abstract_inverted_index":{"Passwords":[0],"are":[1,194],"pervasively":[2],"used":[3],"to":[4,19,62,106,122],"authenticate":[5],"users\u2019":[6],"identities":[7],"in":[8,35,46],"mobile":[9],"apps.":[10,125,200],"To":[11,78,126],"secure":[12,197],"passwords":[13],"against":[14,38,118],"attacks,":[15],"protection":[16,29,45,108],"is":[17,176],"applied":[18],"the":[20,28,116,119,142,171,184],"password":[21],"authentication":[22,64],"protocol":[23],"(PAP).":[24],"The":[25,160],"implementation":[26,99],"of":[27,100,174,183],"scheme":[30],"becomes":[31],"an":[32,57,84],"important":[33],"factor":[34],"protecting":[36],"PAP":[37,50,101],"attacks.":[39],"We":[40,66,94,138],"focus":[41],"on":[42],"two":[43,148],"basic":[44],"Android,":[47],"i.e.,":[48],"SSL/TLS-based":[49],"and":[51,88,102,147,155,191],"timestamp-based":[52],"PAP.":[53],"Previously,":[54],"we":[55,82,130],"proposed":[56],"automated":[58],"tool,":[59,144],"<small>GLACIATE</small>":[60,92,105,114,145,175],",":[61,129,146],"detect":[63,166],"flaws.":[65],"were":[67],"curious":[68],"whether":[69],"orchestration":[70,150,164],"(i.e.,":[71],"involving":[72],"manual-effort)":[73],"works":[74],"better":[75],"than":[76,178,198],"automation.":[77],"answer":[79],"this":[80],"question,":[81],"propose":[83],"orchestrated":[85],"approach,":[86],"<small>AuthExploit</small>":[87,128,140,179],"compare":[89],"its":[90],"effectiveness":[91],".":[93,159,180],"study":[95],"requirements":[96],"for":[97],"correct":[98],"then":[103],"apply":[104],"identify":[107],"enhancements":[109],"automatically.":[110],"Through":[111],"dependency":[112],"analysis,":[113],"matches":[115],"implementations":[117],"abstracted":[120],"flaws":[121,167],"recognise":[123],"defective":[124],"evaluate":[127],"collected":[131],"1,200":[132],"Android":[133],"apps":[134,190,193],"from":[135],"Google":[136],"Play.":[137],"compared":[139],"with":[141],"automation":[143],"other":[149,199],"tools,":[151],"<inline-formula><tex-math":[152,156],"notation=\"LaTeX\">${\\sf":[153,157],"MalloDroid}$</tex-math></inline-formula>":[154],"SMV-Hunter}$</tex-math></inline-formula>":[158],"results":[161,185],"demonstrated":[162],"that":[163,187],"tools":[165],"more":[168,196],"precisely":[169],"although":[170],"F1":[172],"score":[173],"higher":[177],"Further":[181],"analysis":[182],"reveals":[186],"highly":[188],"popular":[189],"e-commerce":[192],"not":[195]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}