{"id":"https://openalex.org/W2985539743","doi":"https://doi.org/10.1145/3338498.3358654","title":"State of the Sandbox","display_name":"State of the Sandbox","publication_year":2019,"publication_date":"2019-11-11","ids":{"openalex":"https://openalex.org/W2985539743","doi":"https://doi.org/10.1145/3338498.3358654","mag":"2985539743"},"language":"en","primary_location":{"id":"doi:10.1145/3338498.3358654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338498.3358654","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM Workshop on Privacy in the Electronic Society","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064214382","display_name":"Maximilian Blochberger","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maximilian Blochberger","raw_affiliation_strings":["University of Hamburg, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hamburg, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053493175","display_name":"Jakob Rieck","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jakob Rieck","raw_affiliation_strings":["University of Hamburg, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hamburg, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049752787","display_name":"Christian Burkert","orcid":"https://orcid.org/0000-0001-8187-5447"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Burkert","raw_affiliation_strings":["University of Hamburg, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hamburg, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051390595","display_name":"Tobias Mueller","orcid":"https://orcid.org/0000-0003-0269-634X"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Mueller","raw_affiliation_strings":["University of Hamburg, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hamburg, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004687145","display_name":"Hannes Federrath","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hannes Federrath","raw_affiliation_strings":["University of Hamburg, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hamburg, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I159176309"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.12664034,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"150","last_page":"161"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.9965606927871704},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7727245092391968},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4191124439239502},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4104350209236145},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4079242944717407},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.33203452825546265}],"concepts":[{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.9965606927871704},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7727245092391968},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4191124439239502},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4104350209236145},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4079242944717407},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.33203452825546265},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3338498.3358654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338498.3358654","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM Workshop on Privacy in the Electronic Society","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W6385438","https://openalex.org/W199107698","https://openalex.org/W970311571","https://openalex.org/W1489067988","https://openalex.org/W1499707862","https://openalex.org/W1550000763","https://openalex.org/W1783394343","https://openalex.org/W1953670109","https://openalex.org/W1977634174","https://openalex.org/W2033811191","https://openalex.org/W2035359360","https://openalex.org/W2052602449","https://openalex.org/W2069442545","https://openalex.org/W2092712591","https://openalex.org/W2104263233","https://openalex.org/W2128551894","https://openalex.org/W2137308653","https://openalex.org/W2141554582","https://openalex.org/W2151214587","https://openalex.org/W2232411669","https://openalex.org/W2235876906","https://openalex.org/W2263201859","https://openalex.org/W2295355460","https://openalex.org/W2325711083","https://openalex.org/W2402789968","https://openalex.org/W2410277931","https://openalex.org/W2415016544","https://openalex.org/W2464738545","https://openalex.org/W2492188511","https://openalex.org/W2510556079","https://openalex.org/W2516747684","https://openalex.org/W2529912552","https://openalex.org/W2532435403","https://openalex.org/W2559490865","https://openalex.org/W2594144564","https://openalex.org/W2753200498","https://openalex.org/W2803537118","https://openalex.org/W2952718464","https://openalex.org/W2999585024"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2033352828","https://openalex.org/W2355810117","https://openalex.org/W3098313552","https://openalex.org/W70177500","https://openalex.org/W2546418048","https://openalex.org/W2076427967","https://openalex.org/W3212184609","https://openalex.org/W2499283203","https://openalex.org/W2795849205"],"abstract_inverted_index":{"Sandboxing":[0,18],"is":[1,19,40,78,101,107,163,177],"a":[2,41,104,154],"way":[3],"to":[4,15,21,29,32,62,72],"deliberately":[5],"restrict":[6],"applications":[7],"accessing":[8],"resources":[9],"that":[10,68,126,179],"they":[11],"do":[12,201],"not":[13,202],"need":[14],"function":[16],"properly.":[17],"intended":[20],"limit":[22],"the":[23,48,70,96,110,114,133,143,169,187],"effect":[24],"of":[25,99,113,132,138,173,184,196,205],"potential":[26],"exploits":[27],"and":[28,103],"mitigate":[30],"overreach":[31],"personal":[33],"data.":[34],"Since":[35],"June":[36],"1,":[37],"2012,":[38],"sandboxing":[39,77],"mandatory":[42],"requirement":[43],"for":[44,60,81],"apps":[45,83,131,140,149,185,197],"distributed":[46,84,198],"through":[47,199],"Mac":[49],"App":[50],"Store":[51],"(MAS).":[52],"In":[53],"addition,":[54],"Apple":[55],"has":[56],"made":[57],"it":[58],"easier":[59],"developers":[61],"specify":[63],"sandbox":[64,97,115,121],"entitlements":[65],"-":[66],"capabilities":[67],"allow":[69],"app":[71,88,156],"access":[73],"certain":[74],"resources.":[75],"However,":[76,191],"still":[79],"optional":[80],"macOS":[82,100,174],"outside":[85],"Apple's":[86],"official":[87],"store.":[89],"This":[90],"paper":[91],"provides":[92],"two":[93],"contributions.":[94],"First,":[95],"mechanism":[98],"analyzed":[102,159],"critical":[105],"sandbox-bypass":[106],"identified.":[108],"Second,":[109],"general":[111],"adoption":[112],"mechanism,":[116],"as":[117,119,145,147],"well":[118,146],"app-specific":[120],"configurations":[122],"are":[123,189],"evaluated.":[124],"For":[125],"purpose":[127],"all":[128,139],"8366":[129],"free":[130],"MAS,":[134,144],"making":[135],"25":[136],"%":[137,183,195],"available":[141],"on":[142,186],"4672":[148],"retrieved":[150],"from":[151],"MacUpdate":[152],"(MU),":[153],"third-party":[155],"store,":[157],"were":[158],"dynamically.":[160],"The":[161],"dataset":[162],"over":[164],"eight":[165],"times":[166],"larger":[167],"than":[168,181,193],"second":[170],"biggest":[171],"study":[172],"apps.":[175],"It":[176],"shown":[178],"more":[180,192],"94":[182],"MAS":[188],"sandboxed.":[190],"89":[194],"MU":[200],"make":[203],"use":[204],"sandboxing,":[206],"putting":[207],"users'":[208],"data":[209],"at":[210],"risk.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}