{"id":"https://openalex.org/W2982150574","doi":"https://doi.org/10.1145/3360664.3360671","title":"How much does a zero-permission Android app know about us?","display_name":"How much does a zero-permission Android app know about us?","publication_year":2019,"publication_date":"2019-10-23","ids":{"openalex":"https://openalex.org/W2982150574","doi":"https://doi.org/10.1145/3360664.3360671","mag":"2982150574"},"language":"en","primary_location":{"id":"doi:10.1145/3360664.3360671","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3360664.3360671","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Third Central European Cybersecurity Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071114899","display_name":"Antonios Dimitriadis","orcid":null},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Antonios Dimitriadis","raw_affiliation_strings":["Electr. &amp; Computer Engineering (ECE), Democritus University of Thrace, Xanthi, Greece"],"affiliations":[{"raw_affiliation_string":"Electr. &amp; Computer Engineering (ECE), Democritus University of Thrace, Xanthi, Greece","institution_ids":["https://openalex.org/I147962203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020259169","display_name":"George Drosatos","orcid":"https://orcid.org/0000-0002-8130-5775"},"institutions":[{"id":"https://openalex.org/I4210156054","display_name":"Athena Research and Innovation Center In Information Communication & Knowledge Technologies","ror":"https://ror.org/0576by029","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210156054"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"George Drosatos","raw_affiliation_strings":["Athena Research Centre, University Campus Kimmeria, Xanthi, Greece"],"affiliations":[{"raw_affiliation_string":"Athena Research Centre, University Campus Kimmeria, Xanthi, Greece","institution_ids":["https://openalex.org/I4210156054"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047660023","display_name":"Pavlos S. Efraimidis","orcid":"https://orcid.org/0000-0003-3749-0165"},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Pavlos S. Efraimidis","raw_affiliation_strings":["ECE, Democritus University of Thrace &amp; Athena Research Centre, Xanthi, Greece"],"affiliations":[{"raw_affiliation_string":"ECE, Democritus University of Thrace &amp; Athena Research Centre, Xanthi, Greece","institution_ids":["https://openalex.org/I147962203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5071114899"],"corresponding_institution_ids":["https://openalex.org/I147962203"],"apc_list":null,"apc_paid":null,"fwci":0.1659,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.45912606,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.8734216094017029},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.873108983039856},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.690169095993042},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.557266354560852},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5167576670646667},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5142311453819275},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5090317726135254},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"Personally identifiable information","score":0.4915097653865814},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.4657279849052429},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1470910608768463}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.8734216094017029},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.873108983039856},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.690169095993042},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.557266354560852},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5167576670646667},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5142311453819275},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5090317726135254},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.4915097653865814},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.4657279849052429},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1470910608768463},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3360664.3360671","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3360664.3360671","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Third Central European Cybersecurity Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7599999904632568}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1912883369","https://openalex.org/W2509042760","https://openalex.org/W2549454124","https://openalex.org/W2608119921","https://openalex.org/W2754396422","https://openalex.org/W2838975583","https://openalex.org/W2849090936","https://openalex.org/W2885070483","https://openalex.org/W2911955316"],"related_works":["https://openalex.org/W2316685381","https://openalex.org/W2056388267","https://openalex.org/W2249350383","https://openalex.org/W2072937473","https://openalex.org/W2755037920","https://openalex.org/W4210309948","https://openalex.org/W4388923452","https://openalex.org/W3211901564","https://openalex.org/W2786416059","https://openalex.org/W609672658"],"abstract_inverted_index":{"Android":[0,24,27,63,109,174],"devices":[1],"contain":[2,97],"a":[3,102,105,126,191],"vast":[4],"amount":[5],"of":[6,9,129,143,169,173],"personal":[7,156],"data":[8,13,34,157],"their":[10],"owners.":[11],"These":[12],"are":[14,20],"stored":[15],"on":[16],"the":[17,23,38,42,47,57,66,70,92,113,130,167,178,186],"device":[18,133],"and":[19,84,123,176,189],"protected":[21],"by":[22,36,54],"permission":[25],"scheme.":[26],"apps":[28,175],"can":[29,159],"obtain":[30],"access":[31,48,90,115,171],"to":[32,49,56,68,78,91,117,139],"specific":[33],"items":[35],"requesting":[37],"appropriate":[39],"permissions":[40],"from":[41],"user.":[43,131],"However,":[44],"in":[45],"Android,":[46],"certain":[50],"assets":[51],"is":[52],"granted":[53],"default":[55,170],"installed":[58],"apps.":[59],"For":[60],"example,":[61],"any":[62,87],"app":[64,88,110,194],"has":[65,89,135],"right":[67],"get":[69],"device's":[71],"network":[72],"operator,":[73],"which":[74,94],"may":[75,95,111,148],"be":[76,151],"used":[77],"infer":[79],"information":[80,121,144],"about":[81],"user's":[82],"country":[83],"nationality.":[85],"Similarly,":[86],"clipboard":[93],"occasionally":[96],"very":[98],"sensitive":[99],"information,":[100],"like":[101],"password.":[103],"Consequently,":[104],"honest":[106],"but":[107],"curious":[108],"leverage":[112],"implicit":[114],"rights":[116,172],"accumulate":[118],"such":[119],"unguarded":[120],"pieces":[122],"gradually":[124],"build":[125],"detailed":[127],"profile":[128],"The":[132],"owner":[134],"no":[136],"immediate":[137],"way":[138],"control":[140],"this":[141,154,163],"flow":[142,158],"and,":[145],"even":[146,150],"worse,":[147],"not":[149],"aware":[152],"that":[153,195],"type":[155],"take":[160],"place.":[161],"In":[162],"work,":[164],"we":[165],"examine":[166],"issue":[168],"discuss":[177],"potential":[179],"threat":[180],"against":[181],"user":[182,187,197],"privacy.":[183],"We":[184],"assess":[185],"awareness":[188],"present":[190],"prototype":[192],"zero-permission":[193],"collects":[196],"data.":[198]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
