{"id":"https://openalex.org/W4411010602","doi":"https://doi.org/10.1145/3716816.3727972","title":"PendingMutent: An Authorization Framework for Preventing PendingIntent Attacks in Android-based Mobile Cyber-Physical Systems","display_name":"PendingMutent: An Authorization Framework for Preventing PendingIntent Attacks in Android-based Mobile Cyber-Physical Systems","publication_year":2025,"publication_date":"2025-06-04","ids":{"openalex":"https://openalex.org/W4411010602","doi":"https://doi.org/10.1145/3716816.3727972"},"language":"en","primary_location":{"id":"doi:10.1145/3716816.3727972","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3716816.3727972","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM Workshop on Secure and Trustworthy Cyber-physical Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069079548","display_name":"Pradeep Kumar Duraisamy Soundrapandian","orcid":"https://orcid.org/0000-0002-1085-4005"},"institutions":[{"id":"https://openalex.org/I876193797","display_name":"Vellore Institute of Technology University","ror":"https://ror.org/00qzypv28","country_code":"IN","type":"education","lineage":["https://openalex.org/I876193797"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Pradeep Kumar Duraisamy Soundrapandian","raw_affiliation_strings":["Vellore Institute of Technology, Chennai, Tamilnadu, India"],"affiliations":[{"raw_affiliation_string":"Vellore Institute of Technology, Chennai, Tamilnadu, India","institution_ids":["https://openalex.org/I876193797"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031836695","display_name":"Carlos Rubio-Medrano","orcid":"https://orcid.org/0000-0001-8931-6412"},"institutions":[{"id":"https://openalex.org/I96749437","display_name":"Texas A&M University \u2013 Corpus Christi","ror":"https://ror.org/01mrfdz82","country_code":"US","type":"education","lineage":["https://openalex.org/I96749437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carlos Rubio-Medrano","raw_affiliation_strings":["Texas A&amp;M University - Corpus Christi, Corpus Christi, TX, USA"],"affiliations":[{"raw_affiliation_string":"Texas A&amp;M University - Corpus Christi, Corpus Christi, TX, USA","institution_ids":["https://openalex.org/I96749437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060976816","display_name":"Jaejong Baek","orcid":"https://orcid.org/0000-0001-8588-3524"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jaejong Baek","raw_affiliation_strings":["Arizona State University, Tempe, AZ, USA"],"affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, AZ, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032629337","display_name":"S. Geetha","orcid":"https://orcid.org/0000-0002-6850-9423"},"institutions":[{"id":"https://openalex.org/I876193797","display_name":"Vellore Institute of Technology University","ror":"https://ror.org/00qzypv28","country_code":"IN","type":"education","lineage":["https://openalex.org/I876193797"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Geetha S","raw_affiliation_strings":["Vellore Institute of Technology, Chennai, Tamilnadu, India"],"affiliations":[{"raw_affiliation_string":"Vellore Institute of Technology, Chennai, Tamilnadu, India","institution_ids":["https://openalex.org/I876193797"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5069079548"],"corresponding_institution_ids":["https://openalex.org/I876193797"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16911326,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"32","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.7739804983139038},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.727400004863739},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7256419658660889},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7141450643539429},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.5979399085044861},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.4316747486591339},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.39732304215431213},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.32335400581359863},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3146505653858185},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24166885018348694}],"concepts":[{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.7739804983139038},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.727400004863739},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7256419658660889},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7141450643539429},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.5979399085044861},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.4316747486591339},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.39732304215431213},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32335400581359863},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3146505653858185},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24166885018348694}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3716816.3727972","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3716816.3727972","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM Workshop on Secure and Trustworthy Cyber-physical Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1510845095","https://openalex.org/W2014235365","https://openalex.org/W2085218277","https://openalex.org/W2166743230","https://openalex.org/W2794730535","https://openalex.org/W2884403759","https://openalex.org/W2888034788","https://openalex.org/W2914153747","https://openalex.org/W3103625270","https://openalex.org/W4229059453","https://openalex.org/W4245027182","https://openalex.org/W4253644677","https://openalex.org/W4281633660"],"related_works":["https://openalex.org/W3004173571","https://openalex.org/W3019776739","https://openalex.org/W2546638913","https://openalex.org/W2209816623","https://openalex.org/W2968885840","https://openalex.org/W3135700974","https://openalex.org/W4313307484","https://openalex.org/W2791379413","https://openalex.org/W2086962923","https://openalex.org/W3169101995"],"abstract_inverted_index":{"PendingIntent":[0,67],"(PI)":[1,68],"is":[2],"a":[3,28,70,137],"key":[4,71],"Android":[5],"feature":[6],"that":[7],"allows":[8],"one":[9],"app":[10,30],"to":[11,14,56,136,156],"delegate":[12],"tasks":[13],"another":[15],"while":[16,101],"temporarily":[17],"granting":[18],"its":[19],"permissions.":[20],"However,":[21,150],"this":[22],"can":[23],"create":[24],"security":[25,49,151],"risks":[26,57],"if":[27],"malicious":[29],"gains":[31],"control.":[32],"Between":[33],"2020":[34],"and":[35,61,82,89,104,118],"2023,":[36],"106":[37],"CVEs":[38],"highlighted":[39],"such":[40],"vulnerabilities.":[41],"Our":[42],"analysis":[43],"of":[44,146],"180,606":[45],"apps":[46],"found":[47],"PI-related":[48],"flaws":[50],"in":[51,73,87,102],"2.21%":[52],"(3,993":[53],"apps),":[54],"leading":[55],"like":[58,110],"privilege":[59],"escalation":[60],"unauthorized":[62],"actions.":[63],"Beyond":[64],"mobile":[65],"apps,":[66],"plays":[69],"role":[72],"Mobile":[74],"Cyber-Physical":[75],"Systems":[76],"(MCPS)":[77],"by":[78],"enabling":[79],"scheduled":[80],"workflows":[81,109],"automating":[83],"tasks.":[84],"For":[85],"instance,":[86],"IoT":[88],"Smart":[90],"Home":[91],"Systems,":[92],"PI":[93,125,133],"manages":[94],"temperature":[95],"adjustments":[96],"based":[97],"on":[98,144],"preset":[99],"schedules,":[100],"Healthcare":[103],"Wearable":[105],"Devices,":[106],"it":[107],"triggers":[108],"medication":[111],"reminders":[112],"or":[113,140],"orthopedic":[114],"exercises":[115],"for":[116],"patients":[117],"the":[119,147],"elderly.":[120],"In":[121,129],"industrial":[122],"control":[123,135],"systems,":[124],"automates":[126],"machinery":[127],"operations.":[128,159],"all":[130],"these":[131,158],"scenarios,":[132],"delegates":[134],"responsible":[138],"component":[139],"app,":[141],"which":[142],"acts":[143],"behalf":[145],"delegating":[148],"app.":[149],"vulnerabilities":[152],"could":[153],"allow":[154],"attackers":[155],"disrupt":[157]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
