{"id":"https://openalex.org/W4293246009","doi":"https://doi.org/10.1109/tmc.2022.3197638","title":"FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps","display_name":"FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps","publication_year":2022,"publication_date":"2022-08-09","ids":{"openalex":"https://openalex.org/W4293246009","doi":"https://doi.org/10.1109/tmc.2022.3197638"},"language":"en","primary_location":{"id":"doi:10.1109/tmc.2022.3197638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2022.3197638","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026074630","display_name":"Xuechao Du","orcid":"https://orcid.org/0000-0001-6032-3002"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuechao Du","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-6032-3002","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076349830","display_name":"Xiang Pan","orcid":"https://orcid.org/0000-0003-3890-6599"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiang Pan","raw_affiliation_strings":["Google Inc, Mountain View, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google Inc, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070605476","display_name":"Yinzhi Cao","orcid":"https://orcid.org/0000-0002-9618-4830"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yinzhi Cao","raw_affiliation_strings":["Department of Computer Science, Johns Hopkins University, Baltimore, MD, USA"],"raw_orcid":"https://orcid.org/0000-0002-9618-4830","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Johns Hopkins University, Baltimore, MD, USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044700531","display_name":"Boyuan He","orcid":"https://orcid.org/0000-0001-9841-3513"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Boyuan He","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113736537","display_name":"G. Fan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210108451","display_name":"Palo Alto Networks (United States)","ror":"https://ror.org/01rn6rn86","country_code":"US","type":"company","lineage":["https://openalex.org/I4210108451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gan Fan","raw_affiliation_strings":["Palo Alto Networks, Santa Clara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Palo Alto Networks, Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210108451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100378166","display_name":"Yan Chen","orcid":"https://orcid.org/0000-0003-4103-1498"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yan Chen","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA"],"raw_orcid":"https://orcid.org/0000-0003-4103-1498","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039986686","display_name":"Daigang Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210098582","display_name":"ZTE (China)","ror":"https://ror.org/00rjhhq63","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210098582"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daigang Xu","raw_affiliation_strings":["ZTE Corporation, Shenzhen, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ZTE Corporation, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210098582"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9898,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.74017967,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"22","issue":"11","first_page":"6460","last_page":"6476"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9890999794006348,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8447074890136719},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7172979712486267},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.6267260313034058},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6260652542114258},{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.624126672744751},{"id":"https://openalex.org/keywords/information-extraction","display_name":"Information extraction","score":0.47607678174972534},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.44469690322875977},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.4391342103481293},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.4236256778240204},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38529130816459656},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3242719769477844},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10842326283454895}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8447074890136719},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7172979712486267},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.6267260313034058},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6260652542114258},{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.624126672744751},{"id":"https://openalex.org/C195807954","wikidata":"https://www.wikidata.org/wiki/Q1662562","display_name":"Information extraction","level":2,"score":0.47607678174972534},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.44469690322875977},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.4391342103481293},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.4236256778240204},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38529130816459656},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3242719769477844},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10842326283454895},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmc.2022.3197638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2022.3197638","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1499141839","https://openalex.org/W1614298861","https://openalex.org/W1620828929","https://openalex.org/W1979628629","https://openalex.org/W1985752637","https://openalex.org/W1994588724","https://openalex.org/W1998341327","https://openalex.org/W2017025011","https://openalex.org/W2019798206","https://openalex.org/W2027538101","https://openalex.org/W2032724464","https://openalex.org/W2060692877","https://openalex.org/W2067512661","https://openalex.org/W2068894463","https://openalex.org/W2093316511","https://openalex.org/W2113115074","https://openalex.org/W2122672392","https://openalex.org/W2123442489","https://openalex.org/W2125475233","https://openalex.org/W2142145056","https://openalex.org/W2164539435","https://openalex.org/W2168103835","https://openalex.org/W2168649891","https://openalex.org/W2295135469","https://openalex.org/W2518060702","https://openalex.org/W2610305199","https://openalex.org/W2612622960","https://openalex.org/W2796498984","https://openalex.org/W2896457183","https://openalex.org/W2902979785","https://openalex.org/W3160974549","https://openalex.org/W4242210993","https://openalex.org/W4244726870","https://openalex.org/W4245027182","https://openalex.org/W4251541794","https://openalex.org/W4292779060","https://openalex.org/W4300655590","https://openalex.org/W6603196380","https://openalex.org/W6608248944","https://openalex.org/W6629812241","https://openalex.org/W6636510571","https://openalex.org/W6640203312","https://openalex.org/W6713134421","https://openalex.org/W6740133913","https://openalex.org/W6741484637","https://openalex.org/W6744196339","https://openalex.org/W6754545200","https://openalex.org/W6755207826","https://openalex.org/W6764197484","https://openalex.org/W6778883912","https://openalex.org/W6999986095"],"related_works":["https://openalex.org/W2316685381","https://openalex.org/W2056388267","https://openalex.org/W2249350383","https://openalex.org/W2072937473","https://openalex.org/W2755037920","https://openalex.org/W4210309948","https://openalex.org/W4388923452","https://openalex.org/W3211901564","https://openalex.org/W2786416059","https://openalex.org/W2070518775"],"abstract_inverted_index":{"Android":[0,100],"apps":[1],"having":[2],"access":[3],"to":[4,19,75,79,90,103,137],"private":[5],"information":[6,63,80,88],"may":[7],"be":[8],"legitimate,":[9],"depending":[10],"on":[11,31],"whether":[12,38,51,139],"the":[13,21,32,99,104,140,145],"app":[14,26,54],"provides":[15],"users":[16],"enough":[17],"semantics":[18,27,77,85,142],"justify":[20],"access.":[22],"Existing":[23],"works":[24],"analyzing":[25],"are":[28],"coarse-grained,":[29],"staying":[30],"app-level.":[33],"They":[34],"can":[35,160],"only":[36],"identify":[37],"an":[39,72,162,168],"app,":[40],"as":[41,62,117],"a":[42,52,57],"whole,":[43],"should":[44],"request":[45],"special":[46],"permission":[47],"but":[48],"cannot":[49],"answer":[50],"specific":[53],"behavior":[55],"under":[56],"particular":[58],"runtime":[59],"context,":[60],"such":[61,84,116],"flow,":[64],"is":[65,149],"correctly":[66],"justified.":[67],"We":[68],"propose":[69],"<i>FlowCog</i>":[70,95,148,159],",":[71],"automated":[73],"system":[74],"extract":[76],"related":[78,102],"flows":[81,89],"and":[82,112,119,124,133,151,167],"correlate":[83,143],"with":[86,144],"given":[87,105,146],"address":[91],"these":[92,122],"issues.":[93],"Particularly,":[94],"statically":[96],"finds":[97],"all":[98],"views":[101,123],"flow":[106],"via":[107],"control":[108],"or":[109],"data":[110],"dependencies":[111],"then":[113],"extracts":[114],"semantics,":[115],"texts":[118],"images,":[120],"from":[121],"associated":[125],"layouts.":[126],"Next,":[127],"FlowCog":[128],"adopts":[129],"natural":[130],"language":[131],"processing":[132],"deep":[134],"learning":[135],"approaches":[136],"infer":[138],"extracted":[141],"flow.":[147],"open-source":[150],"available":[152],"at":[153],"<uri>https://github.com/xcdu/FlowCog</uri>.":[154],"Our":[155],"evaluation":[156],"shows":[157],"that":[158],"achieve":[161],"accuracy":[163],"rate":[164],"of":[165,172],"95.4&#x0025;":[166],"<inline-formula><tex-math":[169],"notation=\"LaTeX\">$\\mathrm{F}_{1}$</tex-math></inline-formula>":[170],"score":[171],"0.953.":[173]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}