{"id":"https://openalex.org/W7127285067","doi":"https://doi.org/10.1109/tdsc.2026.3660642","title":"Unveiling the Global Landscape of Android Security Updates","display_name":"Unveiling the Global Landscape of Android Security Updates","publication_year":2026,"publication_date":"2026-02-03","ids":{"openalex":"https://openalex.org/W7127285067","doi":"https://doi.org/10.1109/tdsc.2026.3660642"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3660642","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3660642","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tdsc.2026.3660642","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Haiyun Deng","orcid":"https://orcid.org/0009-0001-0496-9885"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haiyun Deng","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0009-0001-0496-9885","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062234261","display_name":"G\u00fcliz Seray Tuncay","orcid":"https://orcid.org/0009-0003-5472-141X"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"G\u00fcliz Seray Tuncay","raw_affiliation_strings":["Google, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0009-0003-5472-141X","affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027087892","display_name":"Abbas Acar","orcid":"https://orcid.org/0000-0002-4891-160X"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abbas Acar","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-4891-160X","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093905998","display_name":"Esteban Luques","orcid":null},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Esteban Luques","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0009-0002-5212-1261","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060971626","display_name":"Harun Oz","orcid":"https://orcid.org/0000-0002-2650-2055"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Harun Oz","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-2650-2055","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078506948","display_name":"Ahmet Ar\u0131\u015f","orcid":"https://orcid.org/0000-0003-4114-5321"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Aris","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0003-4114-5321","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069655048","display_name":"Selcuk Uluagac","orcid":null},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Selcuk Uluagac","raw_affiliation_strings":["Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-9823-3464","affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems Security Lab, Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12160738,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"5971","last_page":"5988"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8700000047683716,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8700000047683716,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.03240000084042549,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.014700000174343586,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8123000264167786},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5568000078201294},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5342000126838684},{"id":"https://openalex.org/keywords/application-security","display_name":"Application security","score":0.5059999823570251},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.352400004863739},{"id":"https://openalex.org/keywords/fragmentation","display_name":"Fragmentation (computing)","score":0.3407999873161316},{"id":"https://openalex.org/keywords/original-equipment-manufacturer","display_name":"Original equipment manufacturer","score":0.32100000977516174},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.319599986076355}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8123000264167786},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.713100016117096},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6913999915122986},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5568000078201294},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5342000126838684},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.5059999823570251},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.352400004863739},{"id":"https://openalex.org/C191015642","wikidata":"https://www.wikidata.org/wiki/Q1132459","display_name":"Fragmentation (computing)","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C68694590","wikidata":"https://www.wikidata.org/wiki/Q267558","display_name":"Original equipment manufacturer","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3050999939441681},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.30149999260902405},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.29829999804496765},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2840000092983246},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.2709999978542328},{"id":"https://openalex.org/C95491727","wikidata":"https://www.wikidata.org/wiki/Q992968","display_name":"Mobile telephony","level":3,"score":0.2646999955177307},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.2632000148296356},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2558000087738037}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3660642","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3660642","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2026.3660642","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3660642","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2101834106","https://openalex.org/W2700054830","https://openalex.org/W2792035783","https://openalex.org/W2946895418","https://openalex.org/W2968514011","https://openalex.org/W3012761238","https://openalex.org/W3030957512","https://openalex.org/W3094229029","https://openalex.org/W3094748251","https://openalex.org/W3110131984","https://openalex.org/W3153221864","https://openalex.org/W3158714349","https://openalex.org/W4284677821","https://openalex.org/W4391724786","https://openalex.org/W4402263976","https://openalex.org/W4404178929","https://openalex.org/W4408750163","https://openalex.org/W4416549454"],"related_works":[],"abstract_inverted_index":{"Android":[0,27,105,160,175],"is":[1],"the":[2,34,59,64],"world's":[3],"leading":[4],"mobile":[5],"operating":[6],"system,":[7],"with":[8,159,183],"over":[9],"three":[10],"billion":[11],"active":[12],"devices.":[13],"Detecting":[14],"vulnerabilities":[15,61,69,152,172],"and":[16,49,88,145,153,182,194,197],"ensuring":[17],"timely":[18],"patch":[19],"deployment":[20],"are":[21,177],"critical":[22],"to":[23,46,86,103,115,192],"maintaining":[24],"security.":[25],"The":[26],"Open":[28],"Source":[29],"Project":[30],"(AOSP)":[31],"has":[32],"enhanced":[33],"transparency":[35],"of":[36,58,68,171],"security":[37,110,161],"updates":[38],"through":[39],"Security":[40],"Patch":[41],"Levels.":[42],"However,":[43],"challenges":[44],"related":[45],"update":[47,81,106,111,138],"speed":[48],"availability":[50],"persist.":[51],"In":[52],"2022,":[53],"Google":[54],"reported":[55],"that":[56,70,166],"half":[57],"zero-day":[60],"discovered":[62],"in":[63,80,137],"wild":[65],"were":[66],"variations":[67],"had":[71],"already":[72],"been":[73],"patched.":[74],"Recent":[75],"research":[76],"mainly":[77],"highlights":[78],"delays":[79,190],"distribution,":[82],"often":[83],"attributing":[84],"them":[85],"fragmentation":[87,193],"focusing":[89],"primarily":[90],"on":[91,173],"flagship":[92],"devices":[93,120,176],"or":[94],"limited":[95],"time-frames.":[96],"Our":[97,131,147,163],"approach":[98],"takes":[99],"a":[100],"device-centric":[101],"perspective":[102],"investigate":[104],"patterns,":[107],"analyzing":[108],"567K":[109],"records":[112],"from":[113,121],"2014":[114],"2024,":[116],"covering":[117],"904":[118],"distinct":[119],"six":[122],"key":[123],"Original":[124],"Equipment":[125],"Manufacturers":[126],"(OEMs)":[127],"across":[128,141],"98":[129],"countries.":[130],"extensive":[132],"analysis":[133],"revealed":[134],"notable":[135],"differences":[136],"release":[139],"timing":[140],"OEMs,":[142],"device":[143],"types,":[144],"regions.":[146],"study":[148,164],"also":[149,188],"examines":[150],"documented":[151],"weaknesses,":[154],"while":[155],"assessing":[156],"OEM":[157],"compliance":[158],"guidelines.":[162],"shows":[165],"<inline-formula":[167],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[168],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[169],"notation=\"LaTeX\">$\\sim$</tex-math></inline-formula>89.7%":[170],"unpatched":[174],"exploitable":[178],"without":[179],"user":[180],"interaction":[181],"low":[184],"attack":[185],"complexity.":[186],"We":[187],"identified":[189],"linked":[191],"OEM-specific":[195],"challenges,":[196],"provide":[198],"actionable":[199],"insights":[200],"for":[201],"improvement.":[202]},"counts_by_year":[],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-02-04T00:00:00"}