{"id":"https://openalex.org/W4214872448","doi":"https://doi.org/10.1109/tdsc.2022.3155693","title":"\u03bcDep: Mutation-Based Dependency Generation for Precise Taint Analysis on Android Native Code","display_name":"\u03bcDep: Mutation-Based Dependency Generation for Precise Taint Analysis on Android Native Code","publication_year":2022,"publication_date":"2022-03-03","ids":{"openalex":"https://openalex.org/W4214872448","doi":"https://doi.org/10.1109/tdsc.2022.3155693"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3155693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3155693","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058987076","display_name":"Cong Sun","orcid":"https://orcid.org/0000-0001-9116-2694"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Cong Sun","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x0027;an, China"],"raw_orcid":"https://orcid.org/0000-0001-9116-2694","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065847849","display_name":"Yuwan Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuwan Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x0027;an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068257433","display_name":"Dongrui Zeng","orcid":"https://orcid.org/0000-0003-0032-2571"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]},{"id":"https://openalex.org/I4210108451","display_name":"Palo Alto Networks (United States)","ror":"https://ror.org/01rn6rn86","country_code":"US","type":"company","lineage":["https://openalex.org/I4210108451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongrui Zeng","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA","Palo Alto Networks, Inc., Santa Clara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"Palo Alto Networks, Inc., Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210108451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016972157","display_name":"Siqi Ma","orcid":"https://orcid.org/0000-0003-3479-5713"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siqi Ma","raw_affiliation_strings":["University of New South Wales, Canberra, ACT, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales, Canberra, ACT, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085265590","display_name":"Yafei Wu","orcid":"https://orcid.org/0009-0000-6241-2308"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yafei Wu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x0027;an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x0027;an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5058987076"],"corresponding_institution_ids":["https://openalex.org/I149594827"],"apc_list":null,"apc_paid":null,"fwci":1.1891,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.76711415,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"20","issue":"2","first_page":"1461","last_page":"1475"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.8398804664611816},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.794417679309845},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7179892063140869},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.6931602358818054},{"id":"https://openalex.org/keywords/machine-code","display_name":"Machine code","score":0.6114664673805237},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.5618056058883667},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5175939798355103},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5127173662185669},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.4796050786972046},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.46164220571517944},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.45790764689445496},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.45638492703437805},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.4225272238254547},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4198254346847534},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4161120355129242},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.3034394383430481},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2629006505012512},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12761515378952026}],"concepts":[{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.8398804664611816},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.794417679309845},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7179892063140869},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.6931602358818054},{"id":"https://openalex.org/C115168132","wikidata":"https://www.wikidata.org/wiki/Q55813","display_name":"Machine code","level":3,"score":0.6114664673805237},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.5618056058883667},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5175939798355103},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5127173662185669},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.4796050786972046},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.46164220571517944},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.45790764689445496},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.45638492703437805},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4225272238254547},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4198254346847534},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4161120355129242},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.3034394383430481},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2629006505012512},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12761515378952026},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3155693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3155693","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G388274921","display_name":null,"funder_award_id":"2020GY-004","funder_id":"https://openalex.org/F4320336350","funder_display_name":"Key Research and Development Projects of Shaanxi Province"},{"id":"https://openalex.org/G4403232276","display_name":"\u81ea\u4e3b\u65e0\u4eba\u7cfb\u7edf\u9ad8\u5b8c\u6574\u6027\u7406\u8bba\u53ca\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872279","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336350","display_name":"Key Research and Development Projects of Shaanxi Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1440076848","https://openalex.org/W1855904407","https://openalex.org/W1865564993","https://openalex.org/W1963971515","https://openalex.org/W1990649188","https://openalex.org/W1997833177","https://openalex.org/W2014390890","https://openalex.org/W2017025011","https://openalex.org/W2027538101","https://openalex.org/W2028727337","https://openalex.org/W2041276426","https://openalex.org/W2070386561","https://openalex.org/W2071672346","https://openalex.org/W2076192525","https://openalex.org/W2085101183","https://openalex.org/W2106349977","https://openalex.org/W2122672392","https://openalex.org/W2125099630","https://openalex.org/W2166743230","https://openalex.org/W2182918678","https://openalex.org/W2288381557","https://openalex.org/W2377819450","https://openalex.org/W2385667943","https://openalex.org/W2399891510","https://openalex.org/W2464101708","https://openalex.org/W2491928626","https://openalex.org/W2518790240","https://openalex.org/W2519693290","https://openalex.org/W2533311740","https://openalex.org/W2573983983","https://openalex.org/W2577540292","https://openalex.org/W2617476279","https://openalex.org/W2752052041","https://openalex.org/W2791218785","https://openalex.org/W2792868481","https://openalex.org/W2794187539","https://openalex.org/W2889233250","https://openalex.org/W2890190663","https://openalex.org/W2890664869","https://openalex.org/W2963804422","https://openalex.org/W2982413766","https://openalex.org/W3027862040","https://openalex.org/W3139338820","https://openalex.org/W4236991443","https://openalex.org/W4245321046","https://openalex.org/W6639024520","https://openalex.org/W6641190993","https://openalex.org/W6712192629","https://openalex.org/W6743915909","https://openalex.org/W6749449337","https://openalex.org/W6754733780"],"related_works":["https://openalex.org/W3135174262","https://openalex.org/W2587046957","https://openalex.org/W2969365378","https://openalex.org/W1997833177","https://openalex.org/W2104839588","https://openalex.org/W4226168309","https://openalex.org/W4225920890","https://openalex.org/W4285662085","https://openalex.org/W2946230252","https://openalex.org/W4214872448"],"abstract_inverted_index":{"The":[0,182],"existence":[1],"of":[2,16,35,43,59,70,85,115,143,153,179],"native":[3,37,60,75,120,144,166,180],"code":[4,145],"in":[5,12,74,146,196,201],"Android":[6,29,117],"apps":[7,30,118,203],"plays":[8],"an":[9],"important":[10],"role":[11],"triggering":[13],"inconspicuous":[14],"propagation":[15],"secrets":[17],"and":[18,194,204],"circumventing":[19],"malware":[20,205],"detection.":[21],"However,":[22],"the":[23,41,63,68,86,98,116,140,147,151,154,164,170,192,198,208],"state-of-the-art":[24,87,171,209],"information-flow":[25,88],"analysis":[26,66,105,132,137],"tools":[27],"for":[28,55,163],"all":[31],"have":[32],"limited":[33],"capabilities":[34],"analyzing":[36,197],"code.":[38,61,121,181],"Due":[39],"to":[40,51,110,138,168],"complexity":[42],"binary-level":[44],"static":[45,48,130,211],"analysis,":[46],"most":[47],"analyzers":[49,89],"choose":[50],"build":[52],"conservative":[53],"models":[54],"a":[56,103,127,134,160],"selected":[57],"portion":[58],"Though":[62],"recent":[64],"inter-language":[65,210],"improves":[67],"capability":[69],"tracking":[71],"information":[72,113,199],"flow":[73],"code,":[76],"it":[77],"is":[78,189],"still":[79],"far":[80],"from":[81],"attaining":[82],"similar":[83],"effectiveness":[84],"that":[90,186],"focus":[91],"on":[92,150,191],"non-native":[93],"Java":[94],"methods.":[95],"To":[96],"overcome":[97],"above":[99],"constraints,":[100],"we":[101,125],"propose":[102],"new":[104],"framework,":[106,124],"<inline-formula><tex-math":[107,156],"notation=\"LaTeX\">$\\mu$</tex-math></inline-formula>":[108,157],"Dep,":[109],"detect":[111],"sensitive":[112],"flows":[114,200],"containing":[119],"In":[122],"this":[123],"combine":[126],"control-flow":[128],"based":[129],"binary":[131],"with":[133,174,207],"mutation-based":[135],"dynamic":[136],"model":[139],"tainting":[141,176],"behaviors":[142],"apps.":[148],"Based":[149],"result":[152],"analyses,":[155],"Dep":[158],"conducts":[159],"stub":[161],"generation":[162],"related":[165],"functions":[167],"facilitate":[169],"analyzer":[172],"DroidSafe":[173],"fine-grained":[175],"behavior":[177],"summaries":[178],"experimental":[183],"results":[184],"show":[185],"our":[187],"framework":[188],"competitive":[190],"accuracy,":[193],"effective":[195],"real-world":[202],"compared":[206],"analysis.":[212]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-06T09:05:17.133730","created_date":"2025-10-10T00:00:00"}