{"id":"https://openalex.org/W2899424311","doi":"https://doi.org/10.1145/3236024.3275523","title":"Are mobile banking apps secure? what can be improved?","display_name":"Are mobile banking apps secure? what can be improved?","publication_year":2018,"publication_date":"2018-10-26","ids":{"openalex":"https://openalex.org/W2899424311","doi":"https://doi.org/10.1145/3236024.3275523","mag":"2899424311"},"language":"en","primary_location":{"id":"doi:10.1145/3236024.3275523","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3236024.3275523","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100658276","display_name":"Sen Chen","orcid":"https://orcid.org/0000-0001-9477-4100"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Sen Chen","raw_affiliation_strings":["East China Normal University, China"],"affiliations":[{"raw_affiliation_string":"East China Normal University, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043441209","display_name":"Ting Su","orcid":"https://orcid.org/0000-0003-1628-9796"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Ting Su","raw_affiliation_strings":["East China Normal University, China / Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"East China Normal University, China / Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102012317","display_name":"Lingling Fan","orcid":"https://orcid.org/0000-0002-2428-9297"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingling Fan","raw_affiliation_strings":["East China Normal University, China"],"affiliations":[{"raw_affiliation_string":"East China Normal University, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017417068","display_name":"Guozhu Meng","orcid":"https://orcid.org/0000-0001-6388-2571"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Guozhu Meng","raw_affiliation_strings":["Chinese Academy of Sciences, China / Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences, China / Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["Macquarie University, Australia"],"affiliations":[{"raw_affiliation_string":"Macquarie University, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072024833","display_name":"Lihua Xu","orcid":"https://orcid.org/0000-0002-2237-9336"},"institutions":[{"id":"https://openalex.org/I258800397","display_name":"New York University Shanghai","ror":"https://ror.org/02vpsdb40","country_code":"CN","type":"education","lineage":["https://openalex.org/I258800397","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Xu","raw_affiliation_strings":["East China Normal University, China / New York University Shanghai, China"],"affiliations":[{"raw_affiliation_string":"East China Normal University, China / New York University Shanghai, China","institution_ids":["https://openalex.org/I66867065","https://openalex.org/I258800397"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5100658276"],"corresponding_institution_ids":["https://openalex.org/I66867065"],"apc_list":null,"apc_paid":null,"fwci":6.4406,"has_fulltext":false,"cited_by_count":74,"citation_normalized_percentile":{"value":0.97493867,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"797","last_page":"802"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mobile-banking","display_name":"Mobile banking","score":0.6629153490066528},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6397789120674133},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6385064721107483},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6315206289291382},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5649492740631104},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.5214107036590576},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4949588179588318},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4706771969795227},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.4659869074821472},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.42103540897369385},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4136483073234558},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.26927006244659424},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1905442178249359}],"concepts":[{"id":"https://openalex.org/C2775930393","wikidata":"https://www.wikidata.org/wiki/Q1941439","display_name":"Mobile banking","level":2,"score":0.6629153490066528},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6397789120674133},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6385064721107483},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6315206289291382},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5649492740631104},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.5214107036590576},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4949588179588318},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4706771969795227},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.4659869074821472},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.42103540897369385},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4136483073234558},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.26927006244659424},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1905442178249359},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3236024.3275523","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3236024.3275523","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3880525839","display_name":null,"funder_award_id":"CRDCG2017-S04","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"},{"id":"https://openalex.org/G914102573","display_name":null,"funder_award_id":"61502170,61572197,61632005","funder_id":"https://openalex.org/F4320335595","funder_display_name":"National Natural Science Foundation of China-Yunnan Joint Fund"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321885","display_name":"Science and Technology Commission of Shanghai Municipality","ror":"https://ror.org/03kt66j61"},{"id":"https://openalex.org/F4320322370","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67"},{"id":"https://openalex.org/F4320335595","display_name":"National Natural Science Foundation of China-Yunnan Joint Fund","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1464836909","https://openalex.org/W2103239853","https://openalex.org/W2617476279","https://openalex.org/W2784669118","https://openalex.org/W2799665171","https://openalex.org/W2885043017","https://openalex.org/W3102181655","https://openalex.org/W3105413283"],"related_works":["https://openalex.org/W44983088","https://openalex.org/W2789437230","https://openalex.org/W3048300727","https://openalex.org/W2404937507","https://openalex.org/W2030757640","https://openalex.org/W4249403509","https://openalex.org/W2373849942","https://openalex.org/W3016690046","https://openalex.org/W3034529322","https://openalex.org/W2511300489"],"abstract_inverted_index":{"Mobile":[0],"banking":[1,15,32,93,145,161,179],"apps,":[2,33],"as":[3,40,42],"one":[4],"of":[5,28,58,72,125],"the":[6,54,67,126,144,170],"most":[7,147],"contemporary":[8],"FinTechs,":[9],"have":[10,122],"been":[11],"widely":[12],"adopted":[13],"by":[14],"entities":[16,94,146],"to":[17,48,65,105,159,185],"provide":[18],"instant":[19],"financial":[20,110],"services.":[21],"However,":[22],"our":[23,165],"recent":[24],"work":[25],"discovered":[26],"thousands":[27],"vulnerabilities":[29,127,142],"in":[30,140,156],"693":[31],"which":[34],"indicates":[35],"these":[36,73],"apps":[37],"are":[38,137],"not":[39,138],"secure":[41,160],"we":[43,61,76,89,116],"expected.":[44],"This":[45],"motivates":[46],"us":[47],"conduct":[49,101],"this":[50,114],"study":[51,166],"for":[52,131],"understanding":[53],"current":[55],"security":[56,188],"status":[57],"them.":[59],"First,":[60],"take":[62],"6":[63],"months":[64],"track":[66],"reporting":[68],"and":[69,100,128,149,173,182],"patching":[70],"procedure":[71],"vulnerabilities.":[74,87],"Second,":[75],"audit":[77],"4":[78],"state-of":[79],"the-art":[80],"vulnerability":[81],"detection":[82],"tools":[83,136],"on":[84],"those":[85],"patched":[86],"Third,":[88],"discuss":[90],"with":[91],"7":[92],"via":[95],"in-person":[96],"or":[97],"online":[98,103],"meetings":[99],"an":[102],"survey":[104],"gain":[106],"more":[107,151],"feedback":[108],"from":[109],"app":[111],"developers.":[112],"Through":[113],"study,":[115],"reveal":[117],"that":[118,143],"(1)":[119],"people":[120],"may":[121],"inconsistent":[123],"understandings":[124],"different":[129,157,176],"criteria":[130],"rating":[132],"severity;":[133],"(2)":[134],"state-of-the-art":[135],"effective":[139],"detecting":[141],"concern;":[148],"(3)":[150],"efforts":[152],"should":[153],"be":[154],"endeavored":[155],"aspects":[158],"apps.":[162],"We":[163],"believe":[164],"can":[167],"help":[168],"bridge":[169],"existing":[171],"gaps,":[172],"further":[174],"motivate":[175],"parties,":[177],"including":[178],"entities,":[180],"researchers":[181],"policy":[183],"makers,":[184],"better":[186],"tackle":[187],"issues":[189],"altogether.":[190]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":14},{"year":2019,"cited_by_count":9},{"year":2018,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}