{"id":"https://openalex.org/W2518060702","doi":"https://doi.org/10.1109/sp.2016.30","title":"TriggerScope: Towards Detecting Logic Bombs in Android Applications","display_name":"TriggerScope: Towards Detecting Logic Bombs in Android Applications","publication_year":2016,"publication_date":"2016-05-01","ids":{"openalex":"https://openalex.org/W2518060702","doi":"https://doi.org/10.1109/sp.2016.30","mag":"2518060702"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2016.30","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002695158","display_name":"Yanick Fratantonio","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yanick Fratantonio","raw_affiliation_strings":["[UC Santa Barbara, Santa Barbara, CA, USA]"],"affiliations":[{"raw_affiliation_string":"[UC Santa Barbara, Santa Barbara, CA, USA]","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028194244","display_name":"Antonio Bianchi","orcid":"https://orcid.org/0000-0002-2862-5286"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Antonio Bianchi","raw_affiliation_strings":["[UC Santa Barbara, Santa Barbara, CA, USA]"],"affiliations":[{"raw_affiliation_string":"[UC Santa Barbara, Santa Barbara, CA, USA]","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085358980","display_name":"William Robertson","orcid":"https://orcid.org/0000-0002-6968-0273"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"William Robertson","raw_affiliation_strings":["Northeastern University"],"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Northeastern University"],"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["[UC Santa Barbara, Santa Barbara, CA, USA]"],"affiliations":[{"raw_affiliation_string":"[UC Santa Barbara, Santa Barbara, CA, USA]","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["[UC Santa Barbara, Santa Barbara, CA, USA]"],"affiliations":[{"raw_affiliation_string":"[UC Santa Barbara, Santa Barbara, CA, USA]","institution_ids":["https://openalex.org/I154570441"]}]}],"institution_assertions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.489,"has_fulltext":false,"cited_by_count":146,"citation_normalized_percentile":{"value":0.999621,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Characterization and Detection of Android Malware","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Characterization and Detection of Android Malware","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Intrusion Detection and Defense Mechanisms","score":0.9933,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Automated Software Testing Techniques","score":0.9932,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malice","display_name":"Malice","score":0.6427531},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android Malware","score":0.578477},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5466819},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security Analysis","score":0.510672},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.4683069}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.85819364},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7272769},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.66415006},{"id":"https://openalex.org/C2778068216","wikidata":"https://www.wikidata.org/wiki/Q55019500","display_name":"Malice","level":2,"score":0.6427531},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.60815644},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5466819},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4713323},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.4683069},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.4659494},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.36317676},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19688305},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2016.30","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8,"display_name":"Peace, justice, and strong institutions"}],"grants":[],"datasets":[],"versions":[],"referenced_works_count":36,"referenced_works":["https://openalex.org/W109909280","https://openalex.org/W1515180657","https://openalex.org/W1630356589","https://openalex.org/W1710734607","https://openalex.org/W1849042743","https://openalex.org/W1943233084","https://openalex.org/W1963971515","https://openalex.org/W1969599528","https://openalex.org/W1971061858","https://openalex.org/W1982773740","https://openalex.org/W1985752637","https://openalex.org/W2003276999","https://openalex.org/W2014390890","https://openalex.org/W2017025011","https://openalex.org/W2041276426","https://openalex.org/W2070386561","https://openalex.org/W2078197322","https://openalex.org/W2096449544","https://openalex.org/W2104839588","https://openalex.org/W2117030266","https://openalex.org/W2122672392","https://openalex.org/W2124430468","https://openalex.org/W2125011234","https://openalex.org/W2127723417","https://openalex.org/W2140095007","https://openalex.org/W2158888459","https://openalex.org/W2166743230","https://openalex.org/W2243437504","https://openalex.org/W2334842536","https://openalex.org/W2399891510","https://openalex.org/W2491928626","https://openalex.org/W2571682498","https://openalex.org/W2577540292","https://openalex.org/W4242210993","https://openalex.org/W4251478049","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W4383468964","https://openalex.org/W4308353525","https://openalex.org/W4234891089","https://openalex.org/W3200508744","https://openalex.org/W3195586271","https://openalex.org/W3195312353","https://openalex.org/W2782775281","https://openalex.org/W2507496997","https://openalex.org/W2395100307","https://openalex.org/W2067547021"],"abstract_inverted_index":{"Android":[0,201],"is":[1,10,17,68,93,116,131,136,158,275,287],"the":[2,12,30,85,88,102,107,156,219,256,267,303,336],"most":[3,18,33],"popular":[4],"mobile":[5,13],"platform":[6],"today,":[7],"and":[8,36,148,164,211,213,222,226,243,260,284,296],"it":[9,227,246,297],"also":[11,307],"operating":[14],"system":[15,274],"that":[16,83,115,135,194],"heavily":[19],"targeted":[20,140],"by":[21,51,139,289,321,340],"malware.":[22,272],"Existing":[23],"static":[24,191],"analyses":[25],"are":[26,45,319],"effective":[27],"in":[28,151,153,200,347],"detecting":[29,180],"presence":[31],"of":[32,43,65,87,101,106,146,224,231,238,251,263,277],"malicious":[34,69,112],"code":[35],"unwanted":[37,59],"information":[38,60],"flows.":[39,61],"However,":[40],"certain":[41,122,169],"types":[42],"malice":[44,67],"very":[46,94,324],"difficult":[47],"to":[48,96,111,160,165,196,217,315],"capture":[49],"explicitly":[50],"modeling":[52],"permission":[53],"sets,":[54],"suspicious":[55],"API":[56],"calls,":[57],"or":[58,80,118,329],"One":[62],"important":[63],"type":[64],"such":[66],"application":[70,91,113],"logic,":[71],"where":[72],"a":[73,99,127,132,176,189,236,248,261,290,323],"program":[74],"(often":[75,123],"subtly)":[76],"modifies":[77],"its":[78],"outputs":[79],"performs":[81],"actions":[82],"violate":[84],"expectations":[86],"user.":[89],"Malicious":[90],"logic":[92,114,128,181,317,337],"hard":[95],"identify":[97,198,279],"without":[98],"specification":[100],"\"normal,\"":[103],"expected":[104],"functionality":[105],"application.":[108],"We":[109,234,306],"refer":[110],"executed,":[117],"triggered,":[119],"only":[120,166],"under":[121,168],"narrow)":[124],"circumstances":[125],"as":[126,144],"bomb.":[129],"This":[130],"powerful":[133],"mechanism":[134],"commonly":[137],"employed":[138],"malware,":[141,265],"often":[142],"used":[143],"part":[145],"APTs":[147],"state-sponsored":[149],"attacks:":[150],"fact,":[152],"this":[154,172],"scenario,":[155],"malware":[157,304],"designed":[159],"target":[161],"specific":[162],"victims":[163],"activate":[167],"circumstances.":[170],"In":[171,183],"paper,":[173],"we":[174,185,244,334],"make":[175],"first":[177],"step":[178],"towards":[179],"bombs.":[182],"particular,":[184],"propose":[186],"trigger":[187],"analysis,":[188,240,342],"new":[190],"analysis":[192,204,216],"technique":[193],"seeks":[195],"automatically":[197,278],"triggers":[199],"applications.":[202],"Our":[203,273],"combines":[205],"symbolic":[206],"execution,":[207],"path":[208],"predicate":[209],"reconstruction":[210],"minimization,":[212],"inter-procedural":[214],"control-dependency":[215],"enable":[218],"precise":[220],"detection":[221,300],"characterization":[223],"triggers,":[225,286],"overcomes":[228],"several":[229,280],"limitations":[230],"existing":[232,310],"approaches.":[233],"implemented":[235],"prototype":[237],"our":[239,341],"called":[241],"TriggerScope,":[242],"evaluated":[245],"over":[247],"large":[249],"corpus":[250],"9,582":[252],"benign":[253,348],"apps":[254],"from":[255],"Google":[257],"Play":[258],"Store":[259],"set":[262],"trigger-based":[264],"including":[266,343],"recently-discovered":[268],"HackingTeam's":[269],"RCSAndroid":[270],"advanced":[271],"capable":[276],"interesting":[281],"time-,":[282],"location-,":[283],"SMS-related":[285],"affected":[288,320],"low":[291],"false":[292,326,330],"positive":[293,327],"rate":[294,301,328],"(0.38%),":[295],"achieves":[298],"100%":[299],"on":[302],"set.":[305],"show":[308],"how":[309],"approaches,":[311],"specifically":[312],"when":[313],"tasked":[314],"detect":[316],"bombs,":[318],"either":[322],"high":[325],"negative":[331],"rate.":[332],"Finally,":[333],"discuss":[335],"bombs":[338],"identified":[339],"two":[344],"previously-unknown":[345],"backdoors":[346],"apps.":[349]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2518060702","counts_by_year":[{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":20},{"year":2021,"cited_by_count":19},{"year":2020,"cited_by_count":18},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":22},{"year":2017,"cited_by_count":18},{"year":2016,"cited_by_count":5}],"updated_date":"2024-11-22T23:14:10.527601","created_date":"2016-09-16"}
