{"id":"https://openalex.org/W4311165752","doi":"https://doi.org/10.1145/3564625.3564641","title":"Analysis of Payment Service Provider SDKs in Android","display_name":"Analysis of Payment Service Provider SDKs in Android","publication_year":2022,"publication_date":"2022-12-03","ids":{"openalex":"https://openalex.org/W4311165752","doi":"https://doi.org/10.1145/3564625.3564641"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3564641","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564641","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024784315","display_name":"Samin Yaseer Mahmud","orcid":"https://orcid.org/0000-0002-4275-894X"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Samin Yaseer Mahmud","raw_affiliation_strings":["North Carolina State University, USA"],"raw_orcid":"https://orcid.org/0000-0002-4275-894X","affiliations":[{"raw_affiliation_string":"North Carolina State University, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049834187","display_name":"K. Virgil English","orcid":"https://orcid.org/0000-0002-3399-4027"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"K. Virgil English","raw_affiliation_strings":["North Carolina State University, USA"],"raw_orcid":"https://orcid.org/0000-0002-3399-4027","affiliations":[{"raw_affiliation_string":"North Carolina State University, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045471293","display_name":"Seaver Thorn","orcid":"https://orcid.org/0000-0002-7907-2327"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seaver Thorn","raw_affiliation_strings":["North Carolina State University, USA"],"raw_orcid":"https://orcid.org/0000-0002-7907-2327","affiliations":[{"raw_affiliation_string":"North Carolina State University, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024034310","display_name":"William Enck","orcid":"https://orcid.org/0000-0002-3043-8092"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Enck","raw_affiliation_strings":["North Carolina State University, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-3043-8092","affiliations":[{"raw_affiliation_string":"North Carolina State University, United States of America","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000604351","display_name":"Adam Oest","orcid":"https://orcid.org/0000-0002-4313-3714"},"institutions":[{"id":"https://openalex.org/I1302135459","display_name":"PayPal (United States)","ror":"https://ror.org/016jadm77","country_code":"US","type":"company","lineage":["https://openalex.org/I1302135459"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam Oest","raw_affiliation_strings":["PayPal, USA"],"raw_orcid":"https://orcid.org/0000-0002-4313-3714","affiliations":[{"raw_affiliation_string":"PayPal, USA","institution_ids":["https://openalex.org/I1302135459"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076891624","display_name":"Muhammad Saad","orcid":"https://orcid.org/0000-0002-8762-4566"},"institutions":[{"id":"https://openalex.org/I1302135459","display_name":"PayPal (United States)","ror":"https://ror.org/016jadm77","country_code":"US","type":"company","lineage":["https://openalex.org/I1302135459"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Saad","raw_affiliation_strings":["PayPal, USA"],"raw_orcid":"https://orcid.org/0000-0002-8762-4566","affiliations":[{"raw_affiliation_string":"PayPal, USA","institution_ids":["https://openalex.org/I1302135459"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.800724983215332},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6360273361206055},{"id":"https://openalex.org/keywords/card-security-code","display_name":"Card security code","score":0.5549554824829102},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.5336374044418335},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.5328887701034546},{"id":"https://openalex.org/keywords/credit-card","display_name":"Credit card","score":0.5100303292274475},{"id":"https://openalex.org/keywords/mobile-payment","display_name":"Mobile payment","score":0.49097421765327454},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4668391942977905},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4447755515575409},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.3345860540866852},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.33146223425865173},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.3079400062561035},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.28309088945388794},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.28294825553894043},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2426305115222931},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09024342894554138}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.800724983215332},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6360273361206055},{"id":"https://openalex.org/C149071572","wikidata":"https://www.wikidata.org/wiki/Q1035664","display_name":"Card security code","level":4,"score":0.5549554824829102},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.5336374044418335},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.5328887701034546},{"id":"https://openalex.org/C2983355114","wikidata":"https://www.wikidata.org/wiki/Q161380","display_name":"Credit card","level":3,"score":0.5100303292274475},{"id":"https://openalex.org/C160949748","wikidata":"https://www.wikidata.org/wiki/Q1365703","display_name":"Mobile payment","level":3,"score":0.49097421765327454},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4668391942977905},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4447755515575409},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3345860540866852},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33146223425865173},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3079400062561035},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28309088945388794},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.28294825553894043},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2426305115222931},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09024342894554138},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3564625.3564641","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564641","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","score":0.44999998807907104,"display_name":"Decent work and economic growth"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1995841147","https://openalex.org/W2001564199","https://openalex.org/W2008810193","https://openalex.org/W2045057497","https://openalex.org/W2050053627","https://openalex.org/W2068932268","https://openalex.org/W2073310694","https://openalex.org/W2096473396","https://openalex.org/W2103370348","https://openalex.org/W2114275288","https://openalex.org/W2127456326","https://openalex.org/W2129426180","https://openalex.org/W2144271133","https://openalex.org/W2145994642","https://openalex.org/W2156744053","https://openalex.org/W2166743230","https://openalex.org/W2167661907","https://openalex.org/W2175373530","https://openalex.org/W2225436211","https://openalex.org/W2613084287","https://openalex.org/W2735107741","https://openalex.org/W2772660489","https://openalex.org/W2788974552","https://openalex.org/W2795216559","https://openalex.org/W2807181794","https://openalex.org/W2808406842","https://openalex.org/W2809457843","https://openalex.org/W2963159097","https://openalex.org/W2985320478","https://openalex.org/W3090910431","https://openalex.org/W3101282381","https://openalex.org/W3167930423","https://openalex.org/W4214931895","https://openalex.org/W4245027182"],"related_works":["https://openalex.org/W811898883","https://openalex.org/W2417326870","https://openalex.org/W2770663761","https://openalex.org/W2753823548","https://openalex.org/W2347767433","https://openalex.org/W1598651479","https://openalex.org/W100905147","https://openalex.org/W2282718009","https://openalex.org/W2391950365","https://openalex.org/W2405672597"],"abstract_inverted_index":{"Payment":[0],"Service":[1],"Providers":[2],"(PSPs)":[3],"provide":[4],"software":[5],"development":[6],"toolkits":[7],"(SDKs)":[8],"for":[9,33,43,58,64,106],"integrating":[10],"complex":[11],"payment":[12,20,36,84],"processing":[13],"code":[14],"into":[15],"applications.":[16,26],"Security":[17],"weaknesses":[18,89],"in":[19],"SDKs":[21,37,65,85],"can":[22],"impact":[23],"thousands":[24],"of":[25,74,99,113,120,133],"In":[27,47],"this":[28],"work,":[29],"we":[30,50],"propose":[31],"AARDroid":[32,81],"statically":[34],"assessing":[35],"against":[38],"OWASP\u2019s":[39],"MASVS":[40],"industry":[41],"standard":[42],"mobile":[44],"application":[45,75],"security.":[46],"creating":[48],"AARDroid,":[49],"adapted":[51],"application-level":[52],"requirements":[53],"and":[54,86,110],"program":[55],"analysis":[56,63,123],"tools":[57],"SDK-specific":[59],"analysis,":[60],"tailoring":[61],"dataflow":[62],"using":[66],"domain-specific":[67],"ontologies":[68],"to":[69,82,96,128],"infer":[70],"the":[71,118,125,130],"security":[72,88,122],"semantics":[73],"programming":[76],"interfaces":[77],"(APIs).":[78],"We":[79],"apply":[80],"50":[83],"discover":[87],"including":[90],"saving":[91],"unencrypted":[92],"credit":[93,107],"card":[94,108],"information":[95],"files,":[97],"use":[98,112],"insecure":[100,103,111,134],"cryptographic":[101],"primitives,":[102],"input":[104],"methods":[105],"information,":[109],"WebViews.":[114],"These":[115],"results":[116],"demonstrate":[117],"value":[119],"applying":[121],"at":[124],"SDK":[126],"granularity":[127],"prevent":[129],"widespread":[131],"deployment":[132],"code.":[135]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}