{"id":"https://openalex.org/W2083755826","doi":"https://doi.org/10.1109/tse.2015.2419611","title":"COVERT: Compositional Analysis of Android Inter-App Permission Leakage","display_name":"COVERT: Compositional Analysis of Android Inter-App Permission Leakage","publication_year":2015,"publication_date":"2015-04-03","ids":{"openalex":"https://openalex.org/W2083755826","doi":"https://doi.org/10.1109/tse.2015.2419611","mag":"2083755826"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2015.2419611","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2015.2419611","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030064922","display_name":"Hamid Bagheri","orcid":null},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]},{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Hamid Bagheri","raw_affiliation_strings":["Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA","Department of Computer Science, George Mason University, Fairfax, VA"],"affiliations":[{"raw_affiliation_string":"Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA","institution_ids":["https://openalex.org/I63966007"]},{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049093194","display_name":"Alireza Sadeghi","orcid":"https://orcid.org/0000-0002-5817-3911"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alireza Sadeghi","raw_affiliation_strings":["Department of Computer Science, George Mason University, Fairfax, VA 22030"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax, VA 22030","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051205341","display_name":"Joshua Garcia","orcid":"https://orcid.org/0000-0002-1696-8783"},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joshua Garcia","raw_affiliation_strings":["Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA"],"affiliations":[{"raw_affiliation_string":"Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004407813","display_name":"Sam Malek","orcid":"https://orcid.org/0000-0001-6152-7402"},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sam Malek","raw_affiliation_strings":["Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA"],"affiliations":[{"raw_affiliation_string":"Computer Science and Artificial Intelligence Laboratory at MIT, Cambridge, MA","institution_ids":["https://openalex.org/I63966007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5030064922"],"corresponding_institution_ids":["https://openalex.org/I162714631","https://openalex.org/I63966007"],"apc_list":null,"apc_paid":null,"fwci":15.2202,"has_fulltext":false,"cited_by_count":133,"citation_normalized_percentile":{"value":0.99422774,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"41","issue":"9","first_page":"866","last_page":"886"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8600903749465942},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.84944748878479},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.7245649099349976},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.6769676208496094},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6249433159828186},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5047940015792847},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.504470705986023},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.4425068795681},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.44247370958328247},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.4231935739517212},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38935673236846924},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.33811360597610474},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17101237177848816},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12010198831558228}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8600903749465942},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.84944748878479},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.7245649099349976},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.6769676208496094},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6249433159828186},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5047940015792847},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.504470705986023},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.4425068795681},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.44247370958328247},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.4231935739517212},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38935673236846924},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.33811360597610474},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17101237177848816},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12010198831558228},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2015.2419611","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2015.2419611","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G1120058335","display_name":null,"funder_award_id":"HSHQDC-14-C-B0040","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G2682309553","display_name":null,"funder_award_id":"CCF-1252644","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7830792800","display_name":null,"funder_award_id":"D11AP00282","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":63,"referenced_works":["https://openalex.org/W79696261","https://openalex.org/W81879861","https://openalex.org/W124941384","https://openalex.org/W1491178396","https://openalex.org/W1565125975","https://openalex.org/W1614825945","https://openalex.org/W1630356589","https://openalex.org/W1680232729","https://openalex.org/W1912565424","https://openalex.org/W1963971515","https://openalex.org/W1971328644","https://openalex.org/W1971373119","https://openalex.org/W1972796262","https://openalex.org/W1980011878","https://openalex.org/W1986330503","https://openalex.org/W1988036170","https://openalex.org/W1989147187","https://openalex.org/W1994588724","https://openalex.org/W2003276999","https://openalex.org/W2041276426","https://openalex.org/W2060417529","https://openalex.org/W2060440626","https://openalex.org/W2060692877","https://openalex.org/W2064678220","https://openalex.org/W2080696000","https://openalex.org/W2092298276","https://openalex.org/W2094835181","https://openalex.org/W2096045687","https://openalex.org/W2098602784","https://openalex.org/W2104961083","https://openalex.org/W2113115074","https://openalex.org/W2114275288","https://openalex.org/W2121221235","https://openalex.org/W2127046754","https://openalex.org/W2134429122","https://openalex.org/W2140095007","https://openalex.org/W2142503704","https://openalex.org/W2150189917","https://openalex.org/W2150587160","https://openalex.org/W2153497135","https://openalex.org/W2153542583","https://openalex.org/W2156865091","https://openalex.org/W2158888459","https://openalex.org/W2164392635","https://openalex.org/W2166743230","https://openalex.org/W2171831739","https://openalex.org/W2398354233","https://openalex.org/W2398470900","https://openalex.org/W2398484989","https://openalex.org/W2399034518","https://openalex.org/W2399891510","https://openalex.org/W3033482452","https://openalex.org/W6603356336","https://openalex.org/W6605005253","https://openalex.org/W6637412253","https://openalex.org/W6640059210","https://openalex.org/W6682684344","https://openalex.org/W6685197239","https://openalex.org/W6712192629","https://openalex.org/W6712318706","https://openalex.org/W6712520696","https://openalex.org/W6712745783","https://openalex.org/W7056732649"],"related_works":["https://openalex.org/W65788704","https://openalex.org/W2610659201","https://openalex.org/W4285507391","https://openalex.org/W3107556205","https://openalex.org/W2005010039","https://openalex.org/W2067547021","https://openalex.org/W2805262980","https://openalex.org/W2765174411","https://openalex.org/W2127761335","https://openalex.org/W4234891089"],"abstract_inverted_index":{"Android":[0,33,108],"is":[1,38,58,113,168,175],"the":[2,32,56,60,131,216,221],"most":[3,217],"popular":[4,218],"platform":[5],"for":[6,104,149,177],"mobile":[7],"devices.":[8],"It":[9,128],"facilitates":[10],"sharing":[11],"of":[12,55,62,107,119,136,155,180,213,215],"data":[13],"and":[14,71,126,140,184],"services":[15],"among":[16],"applications":[17,120],"using":[18,196],"a":[19,102,146,153,161,178],"rich":[20],"inter-app":[21,109,209],"communication":[22],"system.":[23],"While":[24],"access":[25],"to":[26,41,69,76,80,115,171,198,207],"resources":[27],"can":[28],"be":[29,48,190],"controlled":[30],"by":[31],"permission":[34],"system,":[35],"enforcing":[36],"permissions":[37,46,57,74,183],"not":[39],"sufficient":[40],"prevent":[42],"security":[43,143],"violations,":[44],"as":[45,121],"may":[47],"mismanaged,":[49],"intentionally":[50],"or":[51,75],"unintentionally.":[52],"Android\u2019s":[53],"enforcement":[54],"at":[59],"level":[61],"individual":[63,90,138],"apps,":[64],"allowing":[65],"multiple":[66],"malicious":[67],"apps":[68,79,203,219],"collude":[70],"combine":[72],"their":[73,84,89],"trick":[77],"vulnerable":[78],"perform":[81],"actions":[82],"on":[83,220],"behalf":[85],"that":[86],"are":[87,123],"beyond":[88],"privileges.":[91],"In":[92],"this":[93,159],"paper,":[94],"we":[95],"present":[96],"<italic":[97],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[98],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[99],"COVERT</i>":[100],",":[101],"tool":[103],"compositional":[105],"analysis":[106,112,118,163],"vulnerabilities.":[110],"COVERT\u2019s":[111],"modular":[114],"enable":[116],"incremental":[117],"they":[122],"installed,":[124],"updated,":[125],"removed.":[127],"statically":[129],"analyzes":[130],"reverse":[132],"engineered":[133],"source":[134],"code":[135],"each":[137,188],"app,":[139],"extracts":[141],"relevant":[142],"specifications":[144,156],"in":[145,158,211],"format":[147],"suitable":[148],"formal":[150,162],"verification.":[151],"Given":[152],"collection":[154],"extracted":[157],"way,":[160],"engine":[164],"(e.g.,":[165],"model":[166],"checker)":[167],"then":[169],"used":[170],"verify":[172],"whether":[173],"it":[174],"safe":[176],"combination":[179],"applications\u2014holding":[181],"certain":[182],"potentially":[185],"interacting":[186],"with":[187,195],"other\u2014to":[189],"installed":[191],"together.":[192],"Our":[193],"experience":[194],"COVERT":[197],"examine":[199],"over":[200],"500":[201],"real-world":[202],"corroborates":[204],"its":[205],"ability":[206],"find":[208],"vulnerabilities":[210],"bundles":[212],"some":[214],"market.":[222]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":18},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":13},{"year":2018,"cited_by_count":15},{"year":2017,"cited_by_count":22},{"year":2016,"cited_by_count":13},{"year":2015,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}