{"id":"https://openalex.org/W7168050171","doi":"https://doi.org/10.1145/3786583.3786912","title":"ViTAL: LLM-Powered Taint Analysis for GUI Field Visualization Auditing in Android","display_name":"ViTAL: LLM-Powered Taint Analysis for GUI Field Visualization Auditing in Android","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7168050171","doi":"https://doi.org/10.1145/3786583.3786912"},"language":null,"primary_location":{"id":"doi:10.1145/3786583.3786912","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786912","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3786583.3786912","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140485253","display_name":"Liuyang Jiang","orcid":"https://orcid.org/0009-0003-5338-7237"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liuyang Jiang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-5338-7237","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140240038","display_name":"Shenghan Liu","orcid":"https://orcid.org/0009-0004-8809-9400"},"institutions":[{"id":"https://openalex.org/I4210098179","display_name":"Shunyi Hospital of Beijing Traditional Chinese Medicine Hospital","ror":"https://ror.org/01qq0qd43","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210098179"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shenghan Liu","raw_affiliation_strings":["Douyin, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-8809-9400","affiliations":[{"raw_affiliation_string":"Douyin, Beijing, China","institution_ids":["https://openalex.org/I4210098179"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060126620","display_name":"Qiuping Yi","orcid":"https://orcid.org/0009-0007-4680-4820"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiuping Yi","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-4680-4820","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100354105","display_name":"Hongliang Liang","orcid":"https://orcid.org/0000-0001-6877-780X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongliang Liang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6877-780X","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076051576","display_name":"Xiangxing Qian","orcid":null},"institutions":[{"id":"https://openalex.org/I4210098179","display_name":"Shunyi Hospital of Beijing Traditional Chinese Medicine Hospital","ror":"https://ror.org/01qq0qd43","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210098179"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangxing Qian","raw_affiliation_strings":["Douyin, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-7819-9203","affiliations":[{"raw_affiliation_string":"Douyin, Beijing, China","institution_ids":["https://openalex.org/I4210098179"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140466876","display_name":"Qingyun Kong","orcid":"https://orcid.org/0009-0005-5202-2054"},"institutions":[{"id":"https://openalex.org/I4210098179","display_name":"Shunyi Hospital of Beijing Traditional Chinese Medicine Hospital","ror":"https://ror.org/01qq0qd43","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210098179"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingyun Kong","raw_affiliation_strings":["Douyin, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-5202-2054","affiliations":[{"raw_affiliation_string":"Douyin, Beijing, China","institution_ids":["https://openalex.org/I4210098179"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024715210","display_name":"Yixiu Chen","orcid":"https://orcid.org/0000-0002-9173-7651"},"institutions":[{"id":"https://openalex.org/I98834328","display_name":"Wuyi University","ror":"https://ror.org/059djzq42","country_code":"CN","type":"education","lineage":["https://openalex.org/I98834328"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixiu Chen","raw_affiliation_strings":["Douyin, ShangHai, China"],"raw_orcid":"https://orcid.org/0000-0002-9173-7651","affiliations":[{"raw_affiliation_string":"Douyin, ShangHai, China","institution_ids":["https://openalex.org/I98834328"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140459851","display_name":"XiaoQiang Fan","orcid":"https://orcid.org/0000-0001-9254-4512"},"institutions":[{"id":"https://openalex.org/I4210098179","display_name":"Shunyi Hospital of Beijing Traditional Chinese Medicine Hospital","ror":"https://ror.org/01qq0qd43","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210098179"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"XiaoQiang Fan","raw_affiliation_strings":["Douyin, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9254-4512","affiliations":[{"raw_affiliation_string":"Douyin, Beijing, China","institution_ids":["https://openalex.org/I4210098179"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5140468895","display_name":"LiangXu Zou","orcid":"https://orcid.org/0009-0000-5719-8781"},"institutions":[{"id":"https://openalex.org/I4210098179","display_name":"Shunyi Hospital of Beijing Traditional Chinese Medicine Hospital","ror":"https://ror.org/01qq0qd43","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210098179"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"LiangXu Zou","raw_affiliation_strings":["Douyin, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0000-5719-8781","affiliations":[{"raw_affiliation_string":"Douyin, Beijing, China","institution_ids":["https://openalex.org/I4210098179"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.96152613,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"740","last_page":"751"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5950000286102295,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5950000286102295,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.13779999315738678,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.04780000075697899,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.7347999811172485},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6347000002861023},{"id":"https://openalex.org/keywords/automatic-summarization","display_name":"Automatic summarization","score":0.6294999718666077},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.5561000108718872},{"id":"https://openalex.org/keywords/graphical-user-interface","display_name":"Graphical user interface","score":0.5292999744415283},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.4945000112056732},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.4584999978542328},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.42239999771118164}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8109999895095825},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.7347999811172485},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6347000002861023},{"id":"https://openalex.org/C170858558","wikidata":"https://www.wikidata.org/wiki/Q1394144","display_name":"Automatic summarization","level":2,"score":0.6294999718666077},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.5561000108718872},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.5292999744415283},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4945000112056732},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.4584999978542328},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.42239999771118164},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.4018999934196472},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.39809998869895935},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3935999870300293},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3903000056743622},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3792000114917755},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.3244999945163727},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.31290000677108765},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3028999865055084},{"id":"https://openalex.org/C8797682","wikidata":"https://www.wikidata.org/wiki/Q2115","display_name":"XML","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.271699994802475},{"id":"https://openalex.org/C14669888","wikidata":"https://www.wikidata.org/wiki/Q4014850","display_name":"Creative visualization","level":3,"score":0.2705000042915344},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.26669999957084656},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.25699999928474426},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2538999915122986},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3786583.3786912","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786912","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3786583.3786912","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786912","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W124941384","https://openalex.org/W2060692877","https://openalex.org/W2138788987","https://openalex.org/W2158297335","https://openalex.org/W2166743230","https://openalex.org/W2293624369","https://openalex.org/W2544992706","https://openalex.org/W2763994238","https://openalex.org/W2796301966","https://openalex.org/W2958157799","https://openalex.org/W3137062637","https://openalex.org/W4247889999","https://openalex.org/W4294653793","https://openalex.org/W4323349084","https://openalex.org/W4366548330","https://openalex.org/W4389161785","https://openalex.org/W4389208992","https://openalex.org/W4400484866","https://openalex.org/W4402684228","https://openalex.org/W4404534210","https://openalex.org/W4406153408","https://openalex.org/W4409311758","https://openalex.org/W4409735743","https://openalex.org/W4415796039"],"related_works":[],"abstract_inverted_index":{"User-generated":[0],"content":[1,182],"(UGC)":[2],"that":[3,48,156],"has":[4],"not":[5],"been":[6],"audited":[7],"may":[8],"pose":[9],"risks":[10],"when":[11],"visualized":[12,35],"on":[13,36],"the":[14,31,37],"client-side":[15,84],"graphical":[16],"user":[17],"interface":[18],"(GUI).":[19],"Therefore,":[20],"it":[21],"is":[22],"critical":[23],"to":[24,58,82,89,98],"accurately":[25],"identify":[26,99],"which":[27],"fields":[28,62,81,134],"delivered":[29],"by":[30,132],"server-side":[32,61,76],"will":[33],"be":[34],"client-side.":[38],"This":[39],"paper":[40],"proposes":[41],"ViTAL,":[42],"an":[43,70,115,150,159],"end-to-end":[44],"taint":[45],"analysis":[46,52],"framework":[47],"deeply":[49],"synergizes":[50],"static":[51],"with":[53],"Large":[54],"Language":[55],"Models":[56],"(LLMs)":[57],"audit":[59],"whether":[60],"in":[63,114],"Android":[64],"applications":[65],"are":[66,106],"ultimately":[67],"visualized.":[68],"Given":[69],"APK":[71],"and":[72,93,112,125,142,164],"its":[73],"set":[74],"of":[75,162,166],"fields,":[77],"ViTAL":[78,157],"maps":[79],"these":[80],"their":[83],"counterparts,":[85],"applies":[86],"transfer":[87],"rules":[88],"track":[90],"data":[91],"flow,":[92],"employs":[94],"LLM-powered":[95],"code":[96],"summarization":[97],"GUI":[100],"visualization":[101,171],"features.":[102],"The":[103],"identified":[104],"features":[105],"then":[107],"validated":[108],"through":[109],"expert":[110],"review":[111],"maintained":[113],"updatable":[116],"knowledge":[117],"base.":[118],"To":[119,144],"support":[120],"rigorous":[121],"evaluation,":[122],"we":[123,147],"constructed":[124],"publicly":[126],"released":[127],"a":[128],"high-quality":[129],"dataset,":[130],"VisualFieldBench,":[131],"collecting":[133],"from":[135],"three":[136],"popular":[137],"applications:":[138],"Douyin,":[139],"Tomato":[140],"Novel,":[141],"Toutiao.":[143],"enhance":[145],"usability,":[146],"also":[148],"provide":[149],"executable":[151],"tool.":[152],"Our":[153],"experiments":[154],"show":[155],"achieves":[158],"average":[160],"recall":[161],"93%":[163],"precision":[165],"79%,":[167],"uncovering":[168],"previously":[169],"overlooked":[170],"fields.":[172],"These":[173],"results":[174],"underscore":[175],"ViTAL\u2019s":[176],"practical":[177],"value":[178],"for":[179],"real-world":[180],"mobile":[181],"security":[183],"auditing.":[184]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-07-12T00:00:00"}