{"id":"https://openalex.org/W4225927463","doi":"https://doi.org/10.1049/ise2.12117","title":"CryptoEval: Evaluating the risk of cryptographic misuses in Android apps with data\u2010flow analysis","display_name":"CryptoEval: Evaluating the risk of cryptographic misuses in Android apps with data\u2010flow analysis","publication_year":2023,"publication_date":"2023-05-24","ids":{"openalex":"https://openalex.org/W4225927463","doi":"https://doi.org/10.1049/ise2.12117"},"language":"en","primary_location":{"id":"doi:10.1049/ise2.12117","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2.12117","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2.12117","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2.12117","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Cong Sun","orcid":"https://orcid.org/0000-0001-9116-2694"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Cong Sun","raw_affiliation_strings":["School of Cyber Engineering Xidian University  Xian China"],"raw_orcid":"https://orcid.org/0000-0001-9116-2694","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering Xidian University  Xian China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088536058","display_name":"Xinpeng Xu","orcid":"https://orcid.org/0000-0001-9856-2762"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinpeng Xu","raw_affiliation_strings":["School of Cyber Engineering Xidian University  Xian China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering Xidian University  Xian China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047905649","display_name":"Yafei Wu","orcid":"https://orcid.org/0000-0003-3667-7091"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yafei Wu","raw_affiliation_strings":["School of Cyber Engineering Xidian University  Xian China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering Xidian University  Xian China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068257433","display_name":"Dongrui Zeng","orcid":"https://orcid.org/0000-0003-0032-2571"},"institutions":[{"id":"https://openalex.org/I4210108451","display_name":"Palo Alto Networks (United States)","ror":"https://ror.org/01rn6rn86","country_code":"US","type":"company","lineage":["https://openalex.org/I4210108451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongrui Zeng","raw_affiliation_strings":["Palo Alto Networks  Santa Clara California USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Palo Alto Networks  Santa Clara California USA","institution_ids":["https://openalex.org/I4210108451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["Pennsylvania State University  University Park Pennsylvania USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University  University Park Pennsylvania USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016972157","display_name":"Siqi Ma","orcid":"https://orcid.org/0000-0003-3479-5713"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siqi Ma","raw_affiliation_strings":["University of New South Wales  Canberra Australian Capital Territory Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales  Canberra Australian Capital Territory Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"last","author":{"id":null,"display_name":"Peicheng Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peicheng Wang","raw_affiliation_strings":["School of Cyber Engineering Xidian University  Xian China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering Xidian University  Xian China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I149594827"],"apc_list":{"value":2200,"currency":"USD","value_usd":2200},"apc_paid":{"value":2200,"currency":"USD","value_usd":2200},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00096293,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"17","issue":"4","first_page":"582","last_page":"597"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9785000085830688,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7801419496536255},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.7537643313407898},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.6648848056793213},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6311783790588379},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5562413930892944},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.4518796503543854},{"id":"https://openalex.org/keywords/toolchain","display_name":"Toolchain","score":0.4291667640209198},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08890759944915771}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7801419496536255},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.7537643313407898},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.6648848056793213},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6311783790588379},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5562413930892944},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.4518796503543854},{"id":"https://openalex.org/C2777062904","wikidata":"https://www.wikidata.org/wiki/Q545406","display_name":"Toolchain","level":3,"score":0.4291667640209198},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08890759944915771},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1049/ise2.12117","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2.12117","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2.12117","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:dc31cd9e153442a89a700f970c47b27a","is_oa":true,"landing_page_url":"https://doaj.org/article/dc31cd9e153442a89a700f970c47b27a","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IET Information Security, Vol 17, Iss 4, Pp 582-597 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1049/ise2.12117","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2.12117","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2.12117","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G388274921","display_name":null,"funder_award_id":"2020GY-004","funder_id":"https://openalex.org/F4320336350","funder_display_name":"Key Research and Development Projects of Shaanxi Province"},{"id":"https://openalex.org/G4403232276","display_name":"\u81ea\u4e3b\u65e0\u4eba\u7cfb\u7edf\u9ad8\u5b8c\u6574\u6027\u7406\u8bba\u53ca\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872279","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7087208236","display_name":null,"funder_award_id":"62272366","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336350","display_name":"Key Research and Development Projects of Shaanxi Province","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4225927463.pdf","grobid_xml":"https://content.openalex.org/works/W4225927463.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W124941384","https://openalex.org/W2008810193","https://openalex.org/W2017025011","https://openalex.org/W2027538101","https://openalex.org/W2051224630","https://openalex.org/W2092115639","https://openalex.org/W2103370348","https://openalex.org/W2133990480","https://openalex.org/W2145994642","https://openalex.org/W2166743230","https://openalex.org/W2269664735","https://openalex.org/W2385667943","https://openalex.org/W2400329213","https://openalex.org/W2407313496","https://openalex.org/W2532717356","https://openalex.org/W2698406033","https://openalex.org/W2759023773","https://openalex.org/W2765648970","https://openalex.org/W2766347289","https://openalex.org/W2767943400","https://openalex.org/W2790835090","https://openalex.org/W2807181794","https://openalex.org/W2808620986","https://openalex.org/W2907964905","https://openalex.org/W2964144088","https://openalex.org/W2984297109","https://openalex.org/W2985320478","https://openalex.org/W4252403066"],"related_works":["https://openalex.org/W1118510","https://openalex.org/W16689587","https://openalex.org/W13550836","https://openalex.org/W2106755","https://openalex.org/W7850971","https://openalex.org/W15825508","https://openalex.org/W4783647","https://openalex.org/W17998313","https://openalex.org/W18341231","https://openalex.org/W1118590"],"abstract_inverted_index":{"Abstract":[0],"The":[1],"misunderstanding":[2],"and":[3,20,27,105,117,211,241,258],"incorrect":[4],"configurations":[5],"of":[6,22,30,38,75,93,125,143,162,183,230,238,244,248,261,272],"cryptographic":[7,23,32,60,76,94,110,128,144,157,188,273],"primitives":[8],"have":[9,55,66],"exposed":[10],"severe":[11],"security":[12,37,73,266],"vulnerabilities":[13],"to":[14,17,44,58,68,112,120,154,159,209,217],"attackers.":[15],"Due":[16],"the":[18,36,45,72,82,90,100,122,126,147,171,180,184,192,201,204,213,224,231,233,236,242,259,269],"pervasiveness":[19],"diversity":[21],"misuses,":[24],"a":[25,103,139,150,160,174],"comprehensive":[26,141],"accurate":[28],"understanding":[29],"how":[31],"misuses":[33,111],"can":[34],"undermine":[35],"an":[39,85,133,166,227],"Android":[40,63,97,276],"app":[41,185,198],"is":[42],"critical":[43],"subsequent":[46,221],"mitigation":[47],"strategies":[48],"but":[49],"also":[50],"challenging.":[51],"Although":[52],"various":[53],"approaches":[54],"been":[56],"proposed":[57],"detect":[59],"misuse":[61,95,129,158,274],"in":[62,96,132,165,275],"apps,":[64,257],"studies":[65],"yet":[67],"focus":[69],"on":[70,169,226,254,268],"estimating":[71],"risks":[74],"misuse.":[77],"To":[78,190],"address":[79],"this":[80],"problem,":[81],"authors":[83,101,148,172,205,234],"present":[84],"extensible":[86,116],"framework":[87,115],"for":[88,108,138,178,197],"deciding":[89],"threat":[91],"level":[92],"apps.":[98,277],"Firstly,":[99],"propose":[102,173],"general":[104],"unified":[106],"specification":[107],"representing":[109],"make":[113,191],"our":[114,239,249],"develop":[118],"adapters":[119],"unify":[121],"detection":[123,135,240],"results":[124],"state\u2010of\u2010the\u2010art":[127],"detectors,":[130],"resulting":[131],"adapter\u2010based":[134],"tool":[136],"chain":[137],"more":[140,195,219],"list":[142],"misuses.":[145,189],"Secondly,":[146],"employ":[149],"misuse\u2010originating":[151],"data\u2010flow":[152,163],"analysis":[153,260],"connect":[155],"each":[156],"set":[161],"sinks":[164],"app,":[167],"based":[168],"which":[170],"quantitative":[175],"data\u2010flow\u2010driven":[176,245],"metric":[177],"assessing":[179],"overall":[181],"risk":[182,246],"introduced":[186],"by":[187],"per\u2010app":[193],"assessment":[194,247],"useful":[196],"vetting":[199],"at":[200],"app\u2010store":[202],"level,":[203],"apply":[206],"unsupervised":[207],"learning":[208],"predict":[210],"classify":[212],"top":[214],"risky":[215],"threats":[216,271],"guide":[218],"efficient":[220],"mitigation.":[222],"In":[223],"experiments":[225],"instantiated":[228],"implementation":[229],"framework,":[232],"evaluate":[235],"accuracy":[237],"effect":[243],"framework.":[250],"Our":[251],"empirical":[252],"study":[253],"over":[255],"40,000":[256],"popular":[262],"apps":[263],"reveal":[264],"important":[265],"observations":[267],"real":[270]},"counts_by_year":[],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2022-05-05T00:00:00"}