{"id":"https://openalex.org/W7162786366","doi":"https://doi.org/10.1145/3745756.3809193","title":"Fragile Deliveries: Inconsistencies in Android Parcel and Their Security Consequences","display_name":"Fragile Deliveries: Inconsistencies in Android Parcel and Their Security Consequences","publication_year":2026,"publication_date":"2026-05-29","ids":{"openalex":"https://openalex.org/W7162786366","doi":"https://doi.org/10.1145/3745756.3809193"},"language":null,"primary_location":{"id":"doi:10.1145/3745756.3809193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809193","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3745756.3809193","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101397370","display_name":"Hongkai Chen","orcid":"https://orcid.org/0000-0003-0308-4732"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongkai Chen","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0009-0003-1458-5142","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137341891","display_name":"Chao Wang","orcid":"https://orcid.org/0000-0002-3310-4258"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chao Wang","raw_affiliation_strings":["The Ohio State University, Columbus, USA"],"raw_orcid":"https://orcid.org/0000-0002-3310-4258","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, USA","institution_ids":["https://openalex.org/I52357470"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134747623","display_name":"Yuqing Yang","orcid":"https://orcid.org/0000-0002-5149-7913"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yuqing Yang","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-5149-7913","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110378670","display_name":"Jennifer Miller","orcid":null},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jennifer Miller","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0009-0006-8923-3581","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076987446","display_name":"Tiffany Bao","orcid":"https://orcid.org/0000-0001-6424-0001"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tiffany Bao","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0000-0001-6424-0001","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137351863","display_name":"Ruoyu Wang","orcid":"https://orcid.org/0000-0003-1524-2566"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruoyu Wang","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0000-0003-1524-2566","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137346644","display_name":"Adam Doup\u00e9","orcid":"https://orcid.org/0000-0003-2634-3901"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam Doup\u00e9","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0000-0003-2634-3901","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137376916","display_name":"Zhiqiang Lin","orcid":"https://orcid.org/0000-0001-6527-5994"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiqiang Lin","raw_affiliation_strings":["The Ohio State University, Columbus, USA"],"raw_orcid":"https://orcid.org/0000-0001-6527-5994","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, USA","institution_ids":["https://openalex.org/I52357470"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5136026856","display_name":"Yan Shoshitaishvili","orcid":null},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yan Shoshitaishvili","raw_affiliation_strings":["Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0000-0001-8832-1789","affiliations":[{"raw_affiliation_string":"Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.6543764,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"111","last_page":"126"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7321000099182129,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7321000099182129,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.029600000008940697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.026000000536441803,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.42820000648498535},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.30649998784065247},{"id":"https://openalex.org/keywords/border-security","display_name":"Border Security","score":0.2538999915122986},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2515000104904175},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.23240000009536743}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6036999821662903},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5321999788284302},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.30649998784065247},{"id":"https://openalex.org/C2780934415","wikidata":"https://www.wikidata.org/wiki/Q20997131","display_name":"Border Security","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2515000104904175},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.23240000009536743},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.22529999911785126},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.22139999270439148},{"id":"https://openalex.org/C95491727","wikidata":"https://www.wikidata.org/wiki/Q992968","display_name":"Mobile telephony","level":3,"score":0.22050000727176666}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3745756.3809193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809193","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3745756.3809193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809193","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W4289939589"],"related_works":[],"abstract_inverted_index":{"The":[0],"Parcel":[1,24,54,104],"mechanism":[2,25],"is":[3],"a":[4,97],"key":[5],"component":[6],"in":[7,10,65],"inter-process":[8],"communication":[9],"Android.":[11],"However,":[12],"due":[13],"to":[14,28,92,162,171],"the":[15,23,32,53,57,76,102,107,123,130,136,163,185],"lack":[16],"of":[17,22,52,90,109,125,175],"security":[18,29,36,50],"considerations,":[19],"incorrect":[20],"implementation":[21],"can":[26],"lead":[27],"vulnerabilities.":[30],"In":[31,43],"past":[33],"decade,":[34],"these":[35,94],"vulnerabilities":[37,157],"have":[38,177],"impacted":[39],"numerous":[40],"Android":[41,132,142,147],"users.":[42],"this":[44],"paper,":[45],"we":[46,134,151,181],"identify":[47,152],"two":[48,88,95],"major":[49],"issues":[51],"mechanism.":[55],"First,":[56],"reading":[58],"and":[59,101,114,145,158,173],"writing":[60],"components":[61],"are":[62],"implemented":[63],"inconsistently":[64],"some":[66],"Parcelable":[67],"classes,":[68],"compromising":[69],"data":[70,155],"integrity.":[71],"Second,":[72],"malformed":[73],"Parcels":[74],"introduce":[75],"potential":[77],"for":[78],"Denial-of-Service":[79],"(DoS)":[80],"attacks":[81,91,128],"on":[82,140],"critical":[83,119],"apps.":[84,148],"We":[85,166],"then":[86],"describe":[87],"types":[89],"exploit":[93],"issues:":[96],"privilege":[98],"escalation":[99],"attack":[100],"Malformed":[103],"DoS":[105,164],"attack,":[106],"latter":[108],"which":[110],"renders":[111],"phones":[112],"unusable":[113],"prevents":[115],"users":[116],"from":[117],"accessing":[118],"services.":[120],"To":[121],"understand":[122],"scope":[124],"our":[126,169],"proposed":[127],"across":[129],"entire":[131],"ecosystem,":[133],"perform":[135],"first":[137],"large-scale":[138],"analysis":[139],"324":[141],"firmware":[143],"samples":[144],"10,161":[146],"Among":[149],"them,":[150],"36":[153],"unique":[154],"mismatch":[156],"3,858":[159],"apps":[160],"vulnerable":[161],"attack.":[165],"responsibly":[167],"disclosed":[168],"findings":[170],"vendors,":[172],"10":[174],"them":[176],"been":[178],"confirmed.":[179],"Finally,":[180],"propose":[182],"mitigations":[183],"against":[184],"attacks.":[186]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-05-30T00:00:00"}