{"id":"https://openalex.org/W3206918860","doi":"https://doi.org/10.1145/3485832.3485888","title":"Characterizing Improper Input Validation Vulnerabilities of Mobile Crowdsourcing Services","display_name":"Characterizing Improper Input Validation Vulnerabilities of Mobile Crowdsourcing Services","publication_year":2021,"publication_date":"2021-12-06","ids":{"openalex":"https://openalex.org/W3206918860","doi":"https://doi.org/10.1145/3485832.3485888","mag":"3206918860"},"language":"en","primary_location":{"id":"doi:10.1145/3485832.3485888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485832.3485888","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485832.3485888","source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3485832.3485888","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010146213","display_name":"Sojhal Ismail Khan","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sojhal Ismail Khan","raw_affiliation_strings":["University of Southern California, United States of America"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California, United States of America","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016292277","display_name":"Dominika Woszczyk","orcid":null},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Dominika C Woszczyk","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066656843","display_name":"Chengzeng You","orcid":null},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Chengzeng You","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007503250","display_name":"Soteris Demetriou","orcid":"https://orcid.org/0000-0003-0318-9171"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Soteris Demetriou","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115597910","display_name":"Muhammad Naveed","orcid":"https://orcid.org/0000-0002-6935-8479"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Naveed","raw_affiliation_strings":["University of Southern California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1812,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.37841945,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"944","last_page":"956"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/crowdsourcing","display_name":"Crowdsourcing","score":0.9418613910675049},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7486411333084106},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6775527596473694},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6652204990386963},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6491881608963013},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.6394931077957153},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6136341094970703},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5745744705200195},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4785750210285187},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.4381800889968872},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4335814118385315},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.4176281690597534},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4121546447277069},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.38266241550445557},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33291226625442505},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2623522877693176},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.14867013692855835},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.10419720411300659}],"concepts":[{"id":"https://openalex.org/C62230096","wikidata":"https://www.wikidata.org/wiki/Q275969","display_name":"Crowdsourcing","level":2,"score":0.9418613910675049},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7486411333084106},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6775527596473694},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6652204990386963},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6491881608963013},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.6394931077957153},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6136341094970703},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5745744705200195},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4785750210285187},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.4381800889968872},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4335814118385315},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.4176281690597534},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4121546447277069},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.38266241550445557},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33291226625442505},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2623522877693176},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.14867013692855835},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.10419720411300659},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3485832.3485888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485832.3485888","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485832.3485888","source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2110.08517","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2110.08517","pdf_url":"https://arxiv.org/pdf/2110.08517","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3485832.3485888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485832.3485888","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485832.3485888","source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6899999976158142}],"awards":[{"id":"https://openalex.org/G7443215020","display_name":"Collaborative Research: CNS Core: Medium: Network-Enabled Cooperative Perception for Future Autonomous Vehicles","funder_award_id":"1956445","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3206918860.pdf","grobid_xml":"https://content.openalex.org/works/W3206918860.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W1437814062","https://openalex.org/W1438616768","https://openalex.org/W1570705485","https://openalex.org/W1905679871","https://openalex.org/W1973316561","https://openalex.org/W1983397967","https://openalex.org/W2036110521","https://openalex.org/W2045057497","https://openalex.org/W2054706300","https://openalex.org/W2083160690","https://openalex.org/W2087436058","https://openalex.org/W2103370348","https://openalex.org/W2119296494","https://openalex.org/W2130135255","https://openalex.org/W2145994642","https://openalex.org/W2146277225","https://openalex.org/W2342926214","https://openalex.org/W2547833747","https://openalex.org/W2707804722","https://openalex.org/W2735029465","https://openalex.org/W2752337926","https://openalex.org/W2773097542","https://openalex.org/W2791018263","https://openalex.org/W2801607016","https://openalex.org/W2802987538","https://openalex.org/W2807634467","https://openalex.org/W2910711580","https://openalex.org/W2944686094","https://openalex.org/W2948004622","https://openalex.org/W2951080837","https://openalex.org/W2963423786","https://openalex.org/W2969958763","https://openalex.org/W2971008823","https://openalex.org/W3008212203","https://openalex.org/W3013843954","https://openalex.org/W3015693366","https://openalex.org/W4299567010","https://openalex.org/W4299811400"],"related_works":["https://openalex.org/W4385801570","https://openalex.org/W576517958","https://openalex.org/W2095252718","https://openalex.org/W4386875801","https://openalex.org/W2134884691","https://openalex.org/W1751204289","https://openalex.org/W1979228063","https://openalex.org/W3206918860","https://openalex.org/W591304058","https://openalex.org/W2922761213"],"abstract_inverted_index":{"Mobile":[0],"crowdsourcing":[1,240],"services":[2,129],"(MCS),":[3],"enable":[4],"fast":[5],"and":[6,12,26,30,48,80,109,126,193,203,214,226],"economical":[7],"data":[8,40,175],"acquisition":[9],"at":[10,178],"scale":[11],"find":[13],"applications":[14],"in":[15,86,113,130,186],"a":[16,31,232],"variety":[17],"of":[18,39,74,83,140,142,161],"domains.":[19,89,133],"Prior":[20],"work":[21],"has":[22],"shown":[23],"that":[24,97,159],"Foursquare":[25],"Waze":[27],"(a":[28],"location-based":[29],"navigation":[32],"MCS)":[33],"are":[34,54],"vulnerable":[35],"to":[36,56,60,64,106,122,150,173,212],"different":[37,132],"kinds":[38],"poisoning":[41,176],"attacks.":[42],"Such":[43],"attacks":[44,177],"can":[45,219],"be":[46],"upsetting":[47],"even":[49],"dangerous":[50,195],"especially":[51],"when":[52],"they":[53],"used":[55],"inject":[57],"improper":[58,75],"inputs":[59],"mislead":[61],"users.":[62],"However,":[63],"date,":[65],"there":[66],"is":[67],"no":[68],"comprehensive":[69],"study":[70,123],"on":[71],"the":[72,81,95,222],"extent":[73],"input":[76,148],"validation":[77],"(IIV)":[78],"vulnerabilities":[79,168],"feasibility":[82],"their":[84,101,152,229],"exploits":[85],"MCSs":[87],"across":[88],"In":[90],"this":[91],"work,":[92],"we":[93,120,137,157,209],"leverage":[94],"fact":[96],"MCS":[98],"interface":[99],"with":[100,145,200],"participants":[102],"through":[103],"mobile":[104,239],"apps":[105],"design":[107],"tools":[108],"new":[110],"methodologies":[111],"embodied":[112],"an":[114,171],"end-to-end":[115],"feedback-driven":[116],"analysis":[117],"framework":[118,136],"which":[119,169,218],"use":[121,230],"10":[124],"popular":[125],"previously":[127],"unexplored":[128],"five":[131],"Using":[134],"our":[135],"send":[138],"tens":[139],"thousands":[141],"API":[143,182],"requests":[144,183],"automatically":[146],"generated":[147],"values":[149],"characterize":[151],"IIV":[153,167,223],"attack":[154,224],"surface.":[155],"Alarmingly,":[156],"found":[158],"most":[160],"them":[162],"(8/10)":[163],"suffer":[164],"from":[165],"grave":[166],"allow":[170],"adversary":[172],"launch":[174],"scale:":[179],"7400":[180],"spoofed":[181],"were":[184],"successful":[185],"faking":[187,197],"online":[188],"posts":[189],"for":[190,228],"robberies,":[191],"gunshots,":[192],"other":[194],"incidents,":[196],"fitness":[198],"activities":[199],"supernatural":[201],"speeds":[202],"distances":[204],"among":[205],"many":[206],"others.":[207],"Lastly,":[208],"discuss":[210],"easy":[211],"implement":[213],"deploy":[215],"mitigation":[216],"strategies":[217],"greatly":[220],"reduce":[221],"surface":[225],"argue":[227],"as":[231],"necessary":[233],"complementary":[234],"measure":[235],"working":[236],"toward":[237],"trustworthy":[238],"services.":[241]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2021-10-25T00:00:00"}