{"id":"https://openalex.org/W4308632258","doi":"https://doi.org/10.1145/3548606.3560710","title":"Poirot","display_name":"Poirot","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308632258","doi":"https://doi.org/10.1145/3548606.3560710"},"language":"en","primary_location":{"id":"doi:10.1145/3548606.3560710","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3560710","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027710261","display_name":"Zeinab El-Rewini","orcid":"https://orcid.org/0000-0002-7090-465X"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Zeinab El-Rewini","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429710","display_name":"Zhuo Zhang","orcid":"https://orcid.org/0000-0002-6515-0021"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhuo Zhang","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007570332","display_name":"Yousra Aafer","orcid":null},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yousra Aafer","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5027710261"],"corresponding_institution_ids":["https://openalex.org/I151746483"],"apc_list":null,"apc_paid":null,"fwci":0.6145,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.66413902,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"937","last_page":"950"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8259103298187256},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7698209285736084},{"id":"https://openalex.org/keywords/reachability","display_name":"Reachability","score":0.5764760971069336},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5613449215888977},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5574366450309753},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4758588671684265},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.47343993186950684},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4185435175895691},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.19836637377738953},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18687564134597778},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.14957892894744873}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8259103298187256},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7698209285736084},{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.5764760971069336},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5613449215888977},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5574366450309753},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4758588671684265},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.47343993186950684},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4185435175895691},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19836637377738953},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18687564134597778},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.14957892894744873},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3548606.3560710","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3560710","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2256289136","display_name":null,"funder_award_id":"40236","funder_id":"https://openalex.org/F4320319952","funder_display_name":"Canada Foundation for Innovation"},{"id":"https://openalex.org/G2263722882","display_name":null,"funder_award_id":"Aspire Award","funder_id":"https://openalex.org/F4320309327","funder_display_name":"Google"},{"id":"https://openalex.org/G6732474712","display_name":null,"funder_award_id":"RGPIN- 07017","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320309327","display_name":"Google","ror":"https://ror.org/00njsd438"},{"id":"https://openalex.org/F4320319952","display_name":"Canada Foundation for Innovation","ror":"https://ror.org/000az4664"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1563577331","https://openalex.org/W2025704776","https://openalex.org/W2060573639","https://openalex.org/W2068424089","https://openalex.org/W2111765806","https://openalex.org/W2121822272","https://openalex.org/W2132523160","https://openalex.org/W2547616304","https://openalex.org/W2548165777","https://openalex.org/W2573570214","https://openalex.org/W2789555918","https://openalex.org/W2891458271","https://openalex.org/W2947265301","https://openalex.org/W2963125488","https://openalex.org/W2963894653","https://openalex.org/W3004040842","https://openalex.org/W3120074996","https://openalex.org/W3138456218","https://openalex.org/W3153698034","https://openalex.org/W4225581256","https://openalex.org/W4299301436"],"related_works":["https://openalex.org/W2136512912","https://openalex.org/W2127267268","https://openalex.org/W2156446763","https://openalex.org/W2067910792","https://openalex.org/W2150194458","https://openalex.org/W2143461633","https://openalex.org/W2889071233","https://openalex.org/W4321471459","https://openalex.org/W4221156924","https://openalex.org/W2380814829"],"abstract_inverted_index":{"Inconsistent":[0],"security":[1],"policy":[2],"enforcement":[3],"within":[4],"the":[5,33,38,62,78],"Android":[6,34,104,112],"framework":[7,105],"can":[8],"allow":[9],"malicious":[10],"actors":[11],"to":[12,59,95],"improperly":[13],"access":[14,65],"sensitive":[15],"resources.":[16],"A":[17],"number":[18],"of":[19,32,64,80,100],"prominent":[20],"inconsistency":[21,88],"detection":[22,89],"approaches":[23,40],"have":[24],"been":[25],"proposed":[26],"in":[27,77],"and":[28,55,114],"across":[29],"various":[30],"layers":[31],"operating":[35],"system.":[36],"However,":[37],"existing":[39],"suffer":[41],"from":[42],"high":[43],"false":[44],"positive":[45],"rates":[46],"as":[47],"they":[48],"rely":[49],"solely":[50],"on":[51,110],"simplistic":[52],"convergence":[53],"analysis":[54],"reachability":[56],"based":[57],"relations":[58],"reason":[60],"about":[61],"validity":[63],"control":[66,72],"enforcement.":[67],"We":[68,107],"observe":[69],"that":[70,91],"resource-to-access":[71],"associations":[73],"are":[74],"highly":[75],"uncertain":[76],"context":[79],"Android.":[81],"Thus,":[82],"we":[83],"introduce":[84],"Poirot,":[85],"a":[86,97],"next-generation":[87],"tool":[90],"leverages":[92],"probabilistic":[93],"inference":[94],"generate":[96],"comprehensive":[98],"set":[99],"protection":[101],"recommendations":[102],"for":[103],"APIs.":[106],"evaluate":[108],"Poirot":[109],"four":[111],"images":[113],"detect":[115],"26":[116],"total":[117],"inconsistencies.":[118]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2022-11-13T00:00:00"}