{"id":"https://openalex.org/W1972350641","doi":"https://doi.org/10.1145/2742647.2742668","title":"Efficient Privilege De-Escalation for Ad Libraries in Mobile Apps","display_name":"Efficient Privilege De-Escalation for Ad Libraries in Mobile Apps","publication_year":2015,"publication_date":"2015-05-11","ids":{"openalex":"https://openalex.org/W1972350641","doi":"https://doi.org/10.1145/2742647.2742668","mag":"1972350641"},"language":"en","primary_location":{"id":"doi:10.1145/2742647.2742668","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2742647.2742668","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100395570","display_name":"Bin Liu","orcid":"https://orcid.org/0000-0003-1859-7119"},"institutions":[{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]},{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Bin Liu","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Samsung Research America, Mountain View, CA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Samsung Research America, Mountain View, CA, USA","institution_ids":["https://openalex.org/I4210101778"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100395570","display_name":"Bin Liu","orcid":"https://orcid.org/0000-0003-1859-7119"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]},{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bin Liu","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Samsung Research America, Mountain View, CA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Samsung Research America, Mountain View, CA, USA","institution_ids":["https://openalex.org/I4210101778"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044205212","display_name":"Hongxia Jin","orcid":"https://orcid.org/0009-0000-0222-4217"},"institutions":[{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongxia Jin","raw_affiliation_strings":["Samsung Research America, Mountain View, CA, USA"],"affiliations":[{"raw_affiliation_string":"Samsung Research America, Mountain View, CA, USA","institution_ids":["https://openalex.org/I4210101778"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042326103","display_name":"Ramesh Govindan","orcid":"https://orcid.org/0000-0001-8311-8853"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ramesh Govindan","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100395570"],"corresponding_institution_ids":["https://openalex.org/I4210101778","https://openalex.org/I74973139"],"apc_list":null,"apc_paid":null,"fwci":10.7126,"has_fulltext":false,"cited_by_count":96,"citation_normalized_percentile":{"value":0.98789276,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"89","last_page":"103"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9800000190734863,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.882122278213501},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.8610262870788574},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7325380444526672},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.6569600701332092},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5646307468414307},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5234279632568359},{"id":"https://openalex.org/keywords/revenue","display_name":"Revenue","score":0.5117545127868652},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.45212578773498535},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.43903791904449463},{"id":"https://openalex.org/keywords/copying","display_name":"Copying","score":0.43135982751846313},{"id":"https://openalex.org/keywords/download","display_name":"Download","score":0.4140809178352356},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.41382667422294617},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34519195556640625},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2245243787765503},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.14011618494987488},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1245567798614502},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.11163961887359619},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08769303560256958},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08340325951576233}],"concepts":[{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.882122278213501},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.8610262870788574},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7325380444526672},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.6569600701332092},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5646307468414307},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5234279632568359},{"id":"https://openalex.org/C195487862","wikidata":"https://www.wikidata.org/wiki/Q850210","display_name":"Revenue","level":2,"score":0.5117545127868652},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.45212578773498535},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.43903791904449463},{"id":"https://openalex.org/C2779151265","wikidata":"https://www.wikidata.org/wiki/Q1156791","display_name":"Copying","level":2,"score":0.43135982751846313},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.4140809178352356},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.41382667422294617},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34519195556640625},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2245243787765503},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.14011618494987488},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1245567798614502},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.11163961887359619},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08769303560256958},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08340325951576233},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2742647.2742668","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2742647.2742668","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W32581813","https://openalex.org/W53797064","https://openalex.org/W59191864","https://openalex.org/W187285683","https://openalex.org/W190551272","https://openalex.org/W594373990","https://openalex.org/W799327109","https://openalex.org/W1499707862","https://openalex.org/W1522939654","https://openalex.org/W1586988631","https://openalex.org/W1605360721","https://openalex.org/W1658739283","https://openalex.org/W1672332771","https://openalex.org/W1963971515","https://openalex.org/W1973548319","https://openalex.org/W1981410518","https://openalex.org/W1987507361","https://openalex.org/W1989734217","https://openalex.org/W1991750733","https://openalex.org/W2053008565","https://openalex.org/W2062340141","https://openalex.org/W2078197322","https://openalex.org/W2084957670","https://openalex.org/W2087804676","https://openalex.org/W2101800210","https://openalex.org/W2104372627","https://openalex.org/W2105412867","https://openalex.org/W2113137917","https://openalex.org/W2117115928","https://openalex.org/W2123437505","https://openalex.org/W2126242334","https://openalex.org/W2136649349","https://openalex.org/W2140095007","https://openalex.org/W2141554582","https://openalex.org/W2151299147","https://openalex.org/W2152047049","https://openalex.org/W2153635508","https://openalex.org/W2156380988","https://openalex.org/W2157286909","https://openalex.org/W2158888459","https://openalex.org/W2166743230","https://openalex.org/W2182125530","https://openalex.org/W2949838346","https://openalex.org/W4285719527","https://openalex.org/W6677520968"],"related_works":["https://openalex.org/W4308771405","https://openalex.org/W2355873265","https://openalex.org/W2963669501","https://openalex.org/W1889284597","https://openalex.org/W3080197661","https://openalex.org/W20625830","https://openalex.org/W4318471783","https://openalex.org/W2760667490","https://openalex.org/W2991781269","https://openalex.org/W775724729"],"abstract_inverted_index":{"The":[0],"proliferation":[1],"of":[2,32,83,103,120,130],"mobile":[3],"apps":[4,24,131],"is":[5],"due":[6],"in":[7,100,117,145],"part":[8],"to":[9,16,42,64,112],"the":[10,30,43,47,71,84,101,118,133],"advertising":[11],"ecosystem":[12],"which":[13],"enables":[14],"developers":[15],"earn":[17],"revenue":[18],"while":[19],"providing":[20],"free":[21],"apps.":[22,157],"Ad-supported":[23],"can":[25,78],"be":[26,79],"developed":[27],"rapidly":[28],"with":[29],"availability":[31],"ad":[33,37,68,76,97,147],"libraries.":[34],"However,":[35],"today?s":[36],"libraries":[38,69,77,98,148],"essentially":[39],"have":[40],"access":[41,73],"same":[44],"resources":[45],"as":[46],"parent":[48],"app,":[49],"and":[50,106,137,149],"this":[51,58],"has":[52,141],"caused":[53],"signi?cant":[54],"privacy":[55],"concerns.":[56],"In":[57],"paper,":[59],"we":[60],"explore":[61],"ef?cient":[62],"methods":[63],"de-escalate":[65],"privileges":[66,74],"for":[67,75,95,108],"where":[70],"resource":[72],"different":[80],"from":[81,132],"that":[82,139],"app":[85],"logic.":[86],"Our":[87],"system,":[88],"PEDAL,":[89],"contains":[90],"a":[91,127,142],"novel":[92],"machine":[93],"classi?er":[94],"detecting":[96,146],"even":[99,116],"presence":[102,119],"obfuscated":[104],"code,":[105],"techniques":[107],"automatically":[109],"instrumenting":[110],"bytecode":[111],"effect":[113],"privilege":[114,121],"de-escalation":[115],"inheritance.":[122],"We":[123],"evaluate":[124],"PEDAL":[125],"on":[126,156],"large":[128],"set":[129],"Google":[134],"Play":[135],"store":[136],"demonstrate":[138],"it":[140],"98%":[143],"accuracy":[144],"imposes":[150],"less":[151],"than":[152],"1%":[153],"runtime":[154],"overhead":[155]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":16},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":12},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":2}],"updated_date":"2026-03-17T09:09:15.849793","created_date":"2025-10-10T00:00:00"}