{"id":"https://openalex.org/W2761748950","doi":"https://doi.org/10.1145/3143361.3143400","title":"Studying TLS Usage in Android Apps","display_name":"Studying TLS Usage in Android Apps","publication_year":2017,"publication_date":"2017-11-22","ids":{"openalex":"https://openalex.org/W2761748950","doi":"https://doi.org/10.1145/3143361.3143400","mag":"2761748950"},"language":"en","primary_location":{"id":"doi:10.1145/3143361.3143400","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3143361.3143400","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th International Conference on emerging Networking EXperiments and Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084849425","display_name":"Abbas Razaghpanah","orcid":"https://orcid.org/0000-0002-0320-8611"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abbas Razaghpanah","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088105701","display_name":"Arian Akhavan Niaki","orcid":"https://orcid.org/0000-0002-4050-7012"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arian Akhavan Niaki","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016569835","display_name":"Narseo Vallina-Rodr\u00edguez","orcid":"https://orcid.org/0000-0002-5420-6835"},"institutions":[{"id":"https://openalex.org/I2802499160","display_name":"IMDEA Networks","ror":"https://ror.org/04mm9fg30","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I2802499160"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Narseo Vallina-Rodriguez","raw_affiliation_strings":["IMDEA Networks / ICSI"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Networks / ICSI","institution_ids":["https://openalex.org/I2802499160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078189600","display_name":"Srikanth Sundaresan","orcid":null},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Srikanth Sundaresan","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059280292","display_name":"Johanna Amann","orcid":null},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Johanna Amann","raw_affiliation_strings":["ICSI"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICSI","institution_ids":["https://openalex.org/I1297971548"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071387474","display_name":"Phillipa Gill","orcid":"https://orcid.org/0000-0003-4286-3018"},"institutions":[{"id":"https://openalex.org/I177605424","display_name":"Amherst College","ror":"https://ror.org/028vqfs63","country_code":"US","type":"education","lineage":["https://openalex.org/I177605424"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillipa Gill","raw_affiliation_strings":["U. Massachusetts -- Amherst"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"U. Massachusetts -- Amherst","institution_ids":["https://openalex.org/I177605424"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":92,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"350","last_page":"362"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.849834680557251},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7166328430175781},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6935927867889404},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6690471172332764},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.5118257403373718},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.475781112909317},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.45080679655075073},{"id":"https://openalex.org/keywords/man-in-the-middle-attack","display_name":"Man-in-the-middle attack","score":0.44426101446151733},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4417656660079956},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.42120561003685},{"id":"https://openalex.org/keywords/handshake","display_name":"Handshake","score":0.4172895848751068},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.37568211555480957},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.31205934286117554},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.27810993790626526},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1745097041130066}],"concepts":[{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.849834680557251},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7166328430175781},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6935927867889404},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6690471172332764},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.5118257403373718},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.475781112909317},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.45080679655075073},{"id":"https://openalex.org/C196491621","wikidata":"https://www.wikidata.org/wiki/Q554830","display_name":"Man-in-the-middle attack","level":3,"score":0.44426101446151733},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4417656660079956},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.42120561003685},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.4172895848751068},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.37568211555480957},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.31205934286117554},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.27810993790626526},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1745097041130066},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.0},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3143361.3143400","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3143361.3143400","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th International Conference on emerging Networking EXperiments and Technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6256700500","display_name":null,"funder_award_id":"CNS-1564329","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W84668401","https://openalex.org/W1638186213","https://openalex.org/W1708992266","https://openalex.org/W2001637908","https://openalex.org/W2019016802","https://openalex.org/W2021327598","https://openalex.org/W2031935336","https://openalex.org/W2046159847","https://openalex.org/W2056494114","https://openalex.org/W2101571537","https://openalex.org/W2103370348","https://openalex.org/W2104899073","https://openalex.org/W2112736324","https://openalex.org/W2114398364","https://openalex.org/W2122538967","https://openalex.org/W2134101189","https://openalex.org/W2145994642","https://openalex.org/W2146752727","https://openalex.org/W2151269705","https://openalex.org/W2161963160","https://openalex.org/W2208157769","https://openalex.org/W2236904012","https://openalex.org/W2266218113","https://openalex.org/W2276785727","https://openalex.org/W2302114600","https://openalex.org/W2341282470","https://openalex.org/W2342960619","https://openalex.org/W2464930408","https://openalex.org/W2492779419","https://openalex.org/W2495477535","https://openalex.org/W2551244268","https://openalex.org/W2552873532","https://openalex.org/W2554129713","https://openalex.org/W2555115505","https://openalex.org/W2561521908","https://openalex.org/W2571682498","https://openalex.org/W2612544399","https://openalex.org/W2615638395","https://openalex.org/W2619725017","https://openalex.org/W3157578954","https://openalex.org/W3183897436","https://openalex.org/W4210531213","https://openalex.org/W4292084264"],"related_works":["https://openalex.org/W4296873577","https://openalex.org/W2572573095","https://openalex.org/W4295681914","https://openalex.org/W4399477715","https://openalex.org/W2516734788","https://openalex.org/W1971902782","https://openalex.org/W2076357705","https://openalex.org/W4385671684","https://openalex.org/W2509010417","https://openalex.org/W2503991861"],"abstract_inverted_index":{"Transport":[0],"Layer":[1],"Security":[2],"(TLS),":[3],"has":[4],"become":[5],"the":[6,43,55,104,114,203,211],"de-facto":[7],"standard":[8],"for":[9,137],"secure":[10,18],"Internet":[11],"communication.":[12],"When":[13],"used":[14,22,78],"correctly,":[15],"it":[16,24],"provides":[17],"data":[19,87],"transfer,":[20],"but":[21,191],"incorrectly,":[23],"can":[25],"leave":[26],"users":[27],"vulnerable":[28,198],"to":[29,95,112,151,188,199,216],"attacks":[30,201],"while":[31],"giving":[32],"them":[33],"a":[34,70,91],"false":[35],"sense":[36],"of":[37,45,72,74,131,155,207,227],"security.":[38],"Numerous":[39],"efforts":[40],"have":[41,165,185],"studied":[42],"adoption":[44],"TLS":[46,76,102,115,143,170,182],"(and":[47],"its":[48,52],"predecessor,":[49],"SSL)":[50],"and":[51,59,65,108,117,122,167,223,251],"use":[53,86,101,133,141,179,194],"in":[54,61,79,103,145,172],"desktop":[56,63],"ecosystem,":[57],"attacks,":[58],"vulnerabilities":[60,186],"both":[62,163],"clients":[64],"servers.":[66],"However,":[67],"there":[68],"is":[69,77,174,205],"dearth":[71],"knowledge":[73],"how":[75,97],"mobile":[80,92,173],"platforms.":[81],"In":[82],"this":[83],"paper":[84],"we":[85,245],"collected":[88],"by":[89],"Lumen,":[90],"measurement":[93],"platform,":[94],"analyze":[96,107],"7,258":[98],"Android":[99,157],"apps":[100,120,132,140,192,212,237],"wild.":[105],"We":[106,126,218],"fingerprint":[109],"handshake":[110],"messages":[111],"characterize":[113],"APIs":[116,136],"libraries":[118],"that":[119,128,162,168,178,193],"use,":[121],"also":[123,219],"evaluate":[124],"weaknesses.":[125],"see":[127,224],"about":[129],"84%":[130],"default":[134],"OS":[135,195,204],"TLS.":[138],"Many":[139],"third-party":[142,249],"libraries;":[144],"some":[146],"cases":[147],"they":[148],"are":[149,197,214],"forced":[150],"do":[152],"so":[153],"because":[154],"restricted":[156],"capabilities.":[158],"Our":[159],"analysis":[160],"shows":[161],"approaches":[164],"limitations,":[166],"improving":[169],"security":[171,228],"not":[175],"straightforward.":[176],"Apps":[177],"their":[180],"own":[181],"configurations":[183],"may":[184],"due":[187],"developer":[189],"inexperience,":[190],"defaults":[196],"certain":[200],"if":[202,210],"out":[206],"date,":[208],"even":[209,234],"themselves":[213],"up":[215],"date.":[217],"study":[220],"certificate":[221,232,255],"verification,":[222],"low":[225],"prevalence":[226],"measures":[229],"such":[230,238],"as":[231,239],"pinning,":[233],"among":[235],"high-risk":[236],"those":[240],"providing":[241],"financial":[242],"services,":[243],"though":[244],"did":[246],"observe":[247],"major":[248],"tracking":[250],"advertisement":[252],"services":[253],"deploying":[254],"pinning.":[256]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":26},{"year":2019,"cited_by_count":16},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}