{"id":"https://openalex.org/W2604850004","doi":"https://doi.org/10.1145/3038912.3052645","title":"AppHolmes","display_name":"AppHolmes","publication_year":2017,"publication_date":"2017-04-03","ids":{"openalex":"https://openalex.org/W2604850004","doi":"https://doi.org/10.1145/3038912.3052645","mag":"2604850004"},"language":"en","primary_location":{"id":"doi:10.1145/3038912.3052645","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3038912.3052645","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th International Conference on World Wide Web","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3038912.3052645","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089690212","display_name":"Mengwei Xu","orcid":"https://orcid.org/0000-0001-6271-6993"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengwei Xu","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101614814","display_name":"Yun Ma","orcid":"https://orcid.org/0000-0001-7866-4075"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yun Ma","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052249316","display_name":"Xuanzhe Liu","orcid":"https://orcid.org/0000-0002-7908-8484"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuanzhe Liu","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025585492","display_name":"Felix Xiaozhu Lin","orcid":"https://orcid.org/0000-0002-1615-6419"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Felix Xiaozhu Lin","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102880548","display_name":"Yunxin Liu","orcid":"https://orcid.org/0000-0001-7352-8955"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunxin Liu","raw_affiliation_strings":["Microsoft Research, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Beijing, China","institution_ids":["https://openalex.org/I4210113369"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6702,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.95086974,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"143","last_page":"152"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/collusion","display_name":"Collusion","score":0.9693349599838257},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.7689160108566284},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.7364855408668518},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7075393199920654},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5564438104629517},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5297751426696777},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.47161415219306946},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4428979158401489},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3869573175907135},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.17907112836837769}],"concepts":[{"id":"https://openalex.org/C2781198186","wikidata":"https://www.wikidata.org/wiki/Q701521","display_name":"Collusion","level":2,"score":0.9693349599838257},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.7689160108566284},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.7364855408668518},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7075393199920654},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5564438104629517},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5297751426696777},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.47161415219306946},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4428979158401489},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3869573175907135},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.17907112836837769},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C40700","wikidata":"https://www.wikidata.org/wiki/Q1411783","display_name":"Industrial organization","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3038912.3052645","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3038912.3052645","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th International Conference on World Wide Web","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3038912.3052645","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3038912.3052645","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 26th International Conference on World Wide Web","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W81879861","https://openalex.org/W1630356589","https://openalex.org/W1912565424","https://openalex.org/W1986480799","https://openalex.org/W1988036170","https://openalex.org/W1994588724","https://openalex.org/W1995145055","https://openalex.org/W2027538101","https://openalex.org/W2028695285","https://openalex.org/W2029082431","https://openalex.org/W2046206206","https://openalex.org/W2047877275","https://openalex.org/W2070192880","https://openalex.org/W2077202047","https://openalex.org/W2077565113","https://openalex.org/W2086648145","https://openalex.org/W2127723417","https://openalex.org/W2141350820","https://openalex.org/W2162871433","https://openalex.org/W2217807077","https://openalex.org/W2270544254","https://openalex.org/W2277576447","https://openalex.org/W2398354233","https://openalex.org/W2398484989","https://openalex.org/W6603356336","https://openalex.org/W6640059210","https://openalex.org/W6999986095"],"related_works":["https://openalex.org/W2009938035","https://openalex.org/W3143020802","https://openalex.org/W1491837399","https://openalex.org/W3122232980","https://openalex.org/W2272761499","https://openalex.org/W2363272970","https://openalex.org/W2120306875","https://openalex.org/W1699588379","https://openalex.org/W2604850004","https://openalex.org/W2011442434"],"abstract_inverted_index":{"Background":[0],"activities":[1,24],"on":[2,121,133],"smartphones":[3],"are":[4,98],"essential":[5],"to":[6],"today's":[7],"\"always-on\"":[8],"mobile":[9,135],"device":[10],"experience.":[11],"Yet,":[12],"there":[13],"lacks":[14],"a":[15,28,65,130],"clear":[16],"understanding":[17],"of":[18,30,42],"the":[19,31,38,53,60,75],"cooperative":[20,92],"behaviors":[21,93],"among":[22,113],"background":[23,54,95],"as":[25,27],"well":[26],"quantification":[29],"consequences.":[32],"In":[33],"this":[34],"paper,":[35],"we":[36,62,87],"present":[37],"first":[39],"in-depth":[40],"study":[41],"app":[43,48,71,76,85,96],"collusion,":[44],"in":[45,52,94],"which":[46],"one":[47],"surreptitiously":[49],"launches":[50],"others":[51],"without":[55],"user's":[56],"awareness.":[57],"To":[58],"enable":[59],"study,":[61],"develop":[63],"AppHolmes,":[64],"static":[66],"analysis":[67],"tool":[68],"for":[69],"detecting":[70],"collusion":[72,103,117],"by":[73,106],"examining":[74],"binaries.":[77],"By":[78],"analyzing":[79],"10,000":[80],"apps":[81],"from":[82],"top":[83],"third-party":[84],"markets,":[86],"found":[88],"that":[89],"i)":[90],"covert,":[91],"launch":[97],"surprisingly":[99],"pervasive,":[100],"ii)":[101],"most":[102],"is":[104],"caused":[105],"shared":[107],"services,":[108],"libraries,":[109],"or":[110],"common":[111],"interest":[112],"apps,":[114],"and":[115,124],"iii)":[116],"has":[118],"serious":[119],"impact":[120],"performance,":[122],"efficiency,":[123],"security.":[125],"Overall,":[126],"our":[127],"work":[128],"presents":[129],"strong":[131],"implication":[132],"future":[134],"system":[136],"design.":[137]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":7}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2017-04-14T00:00:00"}