{"id":"https://openalex.org/W4415443933","doi":"https://doi.org/10.1109/tdsc.2025.3624461","title":"An Empirical Analysis of Information Leakage of File Operations on Android External Storage","display_name":"An Empirical Analysis of Information Leakage of File Operations on Android External Storage","publication_year":2025,"publication_date":"2025-10-22","ids":{"openalex":"https://openalex.org/W4415443933","doi":"https://doi.org/10.1109/tdsc.2025.3624461"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3624461","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3624461","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074938901","display_name":"Shaoyong Du","orcid":"https://orcid.org/0000-0002-7572-1959"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaoyong Du","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-7572-1959","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qinchen Guan","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinchen Guan","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haifeng Yang","orcid":"https://orcid.org/0000-0003-3048-6091"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haifeng Yang","raw_affiliation_strings":["Zhengzhou University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3048-6091","affiliations":[{"raw_affiliation_string":"Zhengzhou University, Zhengzhou, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kerong Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kerong Wang","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102922441","display_name":"Chunfang Yang","orcid":"https://orcid.org/0000-0001-6487-379X"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunfang Yang","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6487-379X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102018721","display_name":"Xiangyang Luo","orcid":"https://orcid.org/0000-0001-6062-2950"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyang Luo","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6062-2950","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24944702,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"2100","last_page":"2116"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9745000004768372,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9244999885559082,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.707099974155426},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.6832000017166138},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5085999965667725},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.451200008392334},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.40610000491142273},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.3725999891757965},{"id":"https://openalex.org/keywords/file-size","display_name":"File size","score":0.37220001220703125},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.35409998893737793},{"id":"https://openalex.org/keywords/data-file","display_name":"Data file","score":0.32510000467300415}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8240000009536743},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.707099974155426},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.6832000017166138},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5085999965667725},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4756999909877777},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.451200008392334},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.44999998807907104},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.40610000491142273},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3725999891757965},{"id":"https://openalex.org/C2776029614","wikidata":"https://www.wikidata.org/wiki/Q1146367","display_name":"File size","level":2,"score":0.37220001220703125},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.35850000381469727},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.35409998893737793},{"id":"https://openalex.org/C171730128","wikidata":"https://www.wikidata.org/wiki/Q5227290","display_name":"Data file","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C95637964","wikidata":"https://www.wikidata.org/wiki/Q82753","display_name":"Computer file","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C4373008","wikidata":"https://www.wikidata.org/wiki/Q513349","display_name":"File server","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C88520388","wikidata":"https://www.wikidata.org/wiki/Q1126823","display_name":"SSH File Transfer Protocol","level":4,"score":0.30649998784065247},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3003999888896942},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2831000089645386},{"id":"https://openalex.org/C529754248","wikidata":"https://www.wikidata.org/wiki/Q1054772","display_name":"Data recovery","level":2,"score":0.2824999988079071},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C152043487","wikidata":"https://www.wikidata.org/wiki/Q1229600","display_name":"Distributed File System","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.259799987077713},{"id":"https://openalex.org/C13674803","wikidata":"https://www.wikidata.org/wiki/Q7627301","display_name":"Stub file","level":3,"score":0.2590000033378601},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.25290000438690186},{"id":"https://openalex.org/C82820731","wikidata":"https://www.wikidata.org/wiki/Q2640620","display_name":"Self-certifying File System","level":3,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3624461","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3624461","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1079075480","display_name":null,"funder_award_id":"62372465","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1540802198","display_name":null,"funder_award_id":"62472440","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2913090720","display_name":null,"funder_award_id":"232300421098","funder_id":"https://openalex.org/F4320323845","funder_display_name":"Natural Science Foundation of Henan Province"},{"id":"https://openalex.org/G7817342302","display_name":null,"funder_award_id":"U23A20305","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323845","display_name":"Natural Science Foundation of Henan Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W1536711614","https://openalex.org/W1976552421","https://openalex.org/W1980110527","https://openalex.org/W2000108661","https://openalex.org/W2008810193","https://openalex.org/W2009613904","https://openalex.org/W2014390890","https://openalex.org/W2017634428","https://openalex.org/W2032616120","https://openalex.org/W2038165128","https://openalex.org/W2074367177","https://openalex.org/W2090465075","https://openalex.org/W2100045669","https://openalex.org/W2108467170","https://openalex.org/W2146521047","https://openalex.org/W2148009765","https://openalex.org/W2150639461","https://openalex.org/W2277397892","https://openalex.org/W2415173805","https://openalex.org/W2416754814","https://openalex.org/W2560459036","https://openalex.org/W2578991858","https://openalex.org/W2753521774","https://openalex.org/W2765582115","https://openalex.org/W2790262412","https://openalex.org/W2790853175","https://openalex.org/W2800505999","https://openalex.org/W2810406511","https://openalex.org/W2810490099","https://openalex.org/W2906643866","https://openalex.org/W2929275958","https://openalex.org/W2947279053","https://openalex.org/W2969001244","https://openalex.org/W3000103489","https://openalex.org/W3007498683","https://openalex.org/W3036689711","https://openalex.org/W3097802856","https://openalex.org/W3130125645","https://openalex.org/W3136957390","https://openalex.org/W3138262553","https://openalex.org/W3174249117","https://openalex.org/W3197476301","https://openalex.org/W4281395576","https://openalex.org/W4288057735","https://openalex.org/W4293192312","https://openalex.org/W4308411159","https://openalex.org/W4319837277","https://openalex.org/W4324007172","https://openalex.org/W4405182577"],"related_works":[],"abstract_inverted_index":{"Current":[0],"Android":[1],"apps":[2,13,51,56,150,163],"rely":[3],"heavily":[4],"on":[5,60,78,142],"external":[6,11,61],"storage.":[7],"When":[8],"using":[9],"the":[10,55,74,97,105,122,165],"storage,":[12,62],"apply":[14],"different":[15,195],"security":[16,192],"strategies":[17],"(e.g.,":[18],"randomizing":[19],"file":[20,23,43,58,92,154,170],"name,":[21],"encrypting":[22],"content)":[24],"to":[25,49,152],"prevent":[26,186],"privacy":[27,34],"risks.":[28],"Even":[29],"so,":[30],"we":[31,72,99,114,136,189],"find":[32,146],"that":[33,147],"risks":[35],"still":[36],"exist,":[37],"i.e.,":[38],"information":[39,120],"leakage":[40],"of":[41,54,90,161,183],"apps'":[42],"operations.":[44],"Users":[45],"follow":[46],"their":[47],"habits":[48],"run":[50],"and":[52,81,118,157],"some":[53,116,191],"conduct":[57,73,137],"operations":[59],"which":[63,168],"potentially":[64],"expose":[65],"users'":[66],"regular":[67],"activities.":[68],"In":[69],"this":[70,79,133,174,187],"paper,":[71],"first":[75],"empirical":[76],"study":[77],"problem":[80,175],"implement":[82],"a":[83,88,138,180],"file-operation-based":[84],"pipeline,":[85],"OP-PERUSE.":[86],"Besides":[87],"dataset":[89],"5,359,339":[91],"operation":[93,155,171],"events":[94],"collected":[95],"from":[96,104],"volunteers,":[98],"crawl":[100],"22,484":[101],"app":[102,107],"records":[103],"third-party":[106,166],"statistics":[108],"websites.":[109],"By":[110],"combining":[111],"these":[112,162],"data,":[113],"get":[115],"timely":[117],"fine-grained":[119],"about":[121],"users,":[123],"e.g.,":[124],"current":[125],"affiliation,":[126],"position,":[127],"habits,":[128],"etc.":[129],"To":[130,185],"further":[131],"understand":[132],"problem's":[134],"severity,":[135],"static":[139],"code":[140],"analysis":[141],"15,098":[143],"apps.":[144],"We":[145],"1,305":[148],"(8.64%)":[149],"tend":[151],"collect":[153],"events,":[156,172],"more":[158],"than":[159],"half":[160],"adopt":[164],"SDKs":[167],"gather":[169],"indicating":[173],"could":[176],"have":[177],"persisted":[178],"over":[179],"long":[181],"period":[182],"time.":[184],"problem,":[188],"provide":[190],"recommendations":[193],"for":[194],"stakeholders.":[196]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-24T00:00:00"}