{"id":"https://openalex.org/W2923317037","doi":"https://doi.org/10.1145/3292006.3300027","title":"REAPER","display_name":"REAPER","publication_year":2019,"publication_date":"2019-03-13","ids":{"openalex":"https://openalex.org/W2923317037","doi":"https://doi.org/10.1145/3292006.3300027","mag":"2923317037"},"language":"en","primary_location":{"id":"doi:10.1145/3292006.3300027","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3292006.3300027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011514684","display_name":"Michalis Diamantaris","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127348","display_name":"FORTH Institute of Electronic Structure and Laser","ror":"https://ror.org/02a3mhk13","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210127348","https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Michalis Diamantaris","raw_affiliation_strings":["FORTH, Heraklion, Greece"],"affiliations":[{"raw_affiliation_string":"FORTH, Heraklion, Greece","institution_ids":["https://openalex.org/I4210127348"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019554426","display_name":"Elias P. Papadopoulos","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127348","display_name":"FORTH Institute of Electronic Structure and Laser","ror":"https://ror.org/02a3mhk13","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210127348","https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Elias P. Papadopoulos","raw_affiliation_strings":["FORTH, Heraklion, Greece"],"affiliations":[{"raw_affiliation_string":"FORTH, Heraklion, Greece","institution_ids":["https://openalex.org/I4210127348"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006368259","display_name":"Evangelos P. Markatos","orcid":"https://orcid.org/0000-0003-3563-7733"},"institutions":[{"id":"https://openalex.org/I4210127348","display_name":"FORTH Institute of Electronic Structure and Laser","ror":"https://ror.org/02a3mhk13","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210127348","https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Evangelos P. Markatos","raw_affiliation_strings":["FORTH, Heraklion, Greece"],"affiliations":[{"raw_affiliation_string":"FORTH, Heraklion, Greece","institution_ids":["https://openalex.org/I4210127348"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022073151","display_name":"Sotiris Ioannidis","orcid":"https://orcid.org/0000-0001-9340-2241"},"institutions":[{"id":"https://openalex.org/I4210127348","display_name":"FORTH Institute of Electronic Structure and Laser","ror":"https://ror.org/02a3mhk13","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210127348","https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Sotiris Ioannidis","raw_affiliation_strings":["FORTH, Heraklion, Greece"],"affiliations":[{"raw_affiliation_string":"FORTH, Heraklion, Greece","institution_ids":["https://openalex.org/I4210127348"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018209439","display_name":"Jason Polakis","orcid":"https://orcid.org/0000-0001-5034-0730"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason Polakis","raw_affiliation_strings":["University of Illinois at Chicago, Chicago, IL, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois at Chicago, Chicago, IL, USA","institution_ids":["https://openalex.org/I39422238"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5011514684"],"corresponding_institution_ids":["https://openalex.org/I4210127348"],"apc_list":null,"apc_paid":null,"fwci":3.483,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":{"value":0.93457714,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"37","last_page":"48"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9807999730110168,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.8830137252807617},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8063551187515259},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7524754405021667},{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.6627711057662964},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5677643418312073},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.5557215809822083},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4616464674472809},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4488334357738495},{"id":"https://openalex.org/keywords/revenue","display_name":"Revenue","score":0.4135363698005676},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3689073622226715},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2953997850418091},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19614669680595398}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.8830137252807617},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8063551187515259},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7524754405021667},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.6627711057662964},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5677643418312073},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.5557215809822083},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4616464674472809},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4488334357738495},{"id":"https://openalex.org/C195487862","wikidata":"https://www.wikidata.org/wiki/Q850210","display_name":"Revenue","level":2,"score":0.4135363698005676},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3689073622226715},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2953997850418091},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19614669680595398},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3292006.3300027","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3292006.3300027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3247803879","display_name":null,"funder_award_id":"INEA/CEF/ICT/A2016/1332498","funder_id":"https://openalex.org/F4320333478","funder_display_name":"Connecting Europe Facility"},{"id":"https://openalex.org/G8920059916","display_name":null,"funder_award_id":"740787,786669,786890,690972","funder_id":"https://openalex.org/F4320335254","funder_display_name":"Horizon 2020"}],"funders":[{"id":"https://openalex.org/F4320333478","display_name":"Connecting Europe Facility","ror":null},{"id":"https://openalex.org/F4320335254","display_name":"Horizon 2020","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1788071698","https://openalex.org/W1972350641","https://openalex.org/W1984043601","https://openalex.org/W1985686072","https://openalex.org/W1986675337","https://openalex.org/W1998862130","https://openalex.org/W2013856010","https://openalex.org/W2014390890","https://openalex.org/W2049917012","https://openalex.org/W2053008565","https://openalex.org/W2068583268","https://openalex.org/W2071672346","https://openalex.org/W2086893284","https://openalex.org/W2087804676","https://openalex.org/W2088749975","https://openalex.org/W2090420215","https://openalex.org/W2101800210","https://openalex.org/W2104839588","https://openalex.org/W2107906795","https://openalex.org/W2123437505","https://openalex.org/W2136649349","https://openalex.org/W2158874007","https://openalex.org/W2159922008","https://openalex.org/W2164170598","https://openalex.org/W2164539435","https://openalex.org/W2166743230","https://openalex.org/W2208157769","https://openalex.org/W2248984376","https://openalex.org/W2286924183","https://openalex.org/W2401742410","https://openalex.org/W2475731385","https://openalex.org/W2511979442","https://openalex.org/W2519687663","https://openalex.org/W2532717356","https://openalex.org/W2533311740","https://openalex.org/W2552004720","https://openalex.org/W2571682498","https://openalex.org/W2574401928","https://openalex.org/W2577540292","https://openalex.org/W2605278663","https://openalex.org/W2612281133","https://openalex.org/W2734721836","https://openalex.org/W2740742367","https://openalex.org/W2753975962","https://openalex.org/W2766106797","https://openalex.org/W2962830343"],"related_works":["https://openalex.org/W2316685381","https://openalex.org/W2056388267","https://openalex.org/W2249350383","https://openalex.org/W2072937473","https://openalex.org/W4210309948","https://openalex.org/W1985686072","https://openalex.org/W4388923452","https://openalex.org/W3211901564","https://openalex.org/W2786416059","https://openalex.org/W2070518775"],"abstract_inverted_index":{"Android's":[0,221],"app":[1,53,146,194,230],"ecosystem":[2],"relies":[3],"heavily":[4],"on":[5,151],"third-party":[6,61,97,200],"libraries":[7,98,169],"as":[8,141],"they":[9],"facilitate":[10],"code":[11],"development":[12],"and":[13,84,109,118,138,170,213,232],"provide":[14],"a":[15,28,44,69,105],"steady":[16],"stream":[17],"of":[18,114,143,184,203,220,250],"revenue":[19],"for":[20,41,51,129,139,207],"developers.":[21],"However,":[22],"while":[23],"Android":[24],"has":[25],"moved":[26],"towards":[27],"more":[29],"fine-grained":[30],"run":[31,222],"time":[32,83,223],"permission":[33,46,224],"system,":[34],"users":[35,131,176,241],"currently":[36],"lack":[37],"the":[38,52,76,89,101,136,157,172,185,192,218,234],"required":[39],"resources":[40],"deciding":[42],"whether":[43],"specific":[45],"request":[47],"is":[48,56,165],"actually":[49],"intended":[50],"itself":[54],"or":[55,229],"requested":[57,78,87,95,187],"by":[58,79,88,96,168,198],"possibly":[59],"dangerous":[60],"libraries.":[62],"In":[63],"this":[64],"paper":[65],"we":[66],"present":[67],"Reaper,":[68],"novel":[70],"dynamic":[71],"analysis":[72],"system":[73],"that":[74,120,175,180,238,246],"traces":[75],"permissions":[77,186,245],"apps":[80,155],"in":[81,135],"real":[82],"distinguishes":[85],"those":[86,94],"app's":[90,252],"core":[91,193,253],"functionality":[92,208,219],"from":[93,191],"linked":[99,199],"with":[100],"app.":[102],"We":[103,178],"implement":[104],"sophisticated":[106],"UI":[107],"automator":[108],"conduct":[110],"an":[111,144,181,251],"extensive":[112],"evaluation":[113],"our":[115],"system's":[116],"performance":[117],"find":[119,179],"Reaper":[121,216],"introduces":[122],"negligible":[123],"overhead,":[124],"rendering":[125],"it":[126,134],"suitable":[127],"both":[128],"end":[130],"(by":[132],"integrating":[133],"OS)":[137],"deployment":[140],"part":[142,249],"official":[145],"vetting":[147],"process.":[148],"Our":[149],"study":[150],"over":[152],"5K":[153],"popular":[154],"demonstrates":[156],"large":[158],"extent":[159],"to":[160,210,242],"which":[161,204],"personally":[162],"identifiable":[163],"information":[164,237],"being":[166],"accessed":[167],"highlights":[171],"privacy":[173],"risks":[174],"face.":[177],"impressive":[182],"65%":[183],"do":[188],"not":[189,248],"originate":[190],"but":[195],"are":[196,205,247],"issued":[197],"libraries,":[201],"37.3%":[202],"used":[206],"related":[209],"ads,":[211],"tracking,":[212],"analytics.":[214],"Overall,":[215],"enhances":[217],"model":[225],"without":[226],"requiring":[227],"OS":[228],"modifications,":[231],"provides":[233],"necessary":[235],"contextual":[236],"can":[239],"enable":[240],"selectively":[243],"deny":[244],"functionality.":[254]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2019-04-01T00:00:00"}
