The DOI matches its Crossref record; 24 of the 24 references it cites were found in a registry or an index.
Why eve and mallory love android: an analysis of android SSL (in)security
Abstract
Many Android apps have a legitimate need to communicate over the Internet and are then responsible for protecting potentially sensitive data during transit. This paper seeks to better understand the potential security threats posed by benign Android apps that use the SSL/TLS protocols to protect data they transmit. Since the lack of visual security indicators for SSL/TLS usage and the inadequate use of SSL/TLS can be exploited to launch Man-in-the-Middle (MITM) attacks, an analysis of 13,500 popular free apps downloaded from Google's Play Market is presented.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Proceedings of the 11th USENIX Security Symposium
Boneh, D. (2002) · Cited by 2,528
TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones
Enck, W., Gilbert, P., Chun, B.-G., Cox, L. P., Jung, J., McDaniel, P. D., & Sheth, A. N. (2010) · doi:10.5555/1924943.1924971 · Cited by 2,238
Android permissions demystified
Felt, A. P., Chin, E., Hanna, S., Song, D., & Wagner, D. (2011) · Proceedings of the 18th ACM conference on Computer and communications security · doi:10.1145/2046707.2046779 · Cited by 1,291
Android permissions: user attention, comprehension, and behavior
Felt, A. P., Ha, E., Egelman, S., Haney, A., Chin, E., & Wagner, D. (2012) · Proceedings of the Eighth Symposium on Usable Privacy and Security · doi:10.1145/2335356.2335360 · Cited by 1,022
On lightweight mobile phone application certification
Enck, W., Ongtang, M., & McDaniel, P. (2009) · Proceedings of the 16th ACM conference on Computer and communications security · doi:10.1145/1653662.1653691 · Cited by 921
A study of android application security
Enck, W., Octeau, D., McDaniel, P. D., & Chaudhuri, S. (2011) · Cited by 871
Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets
Zhou, Y., Wang, Z., Zhou, W., & Jiang, X. (2012) · Network and Distributed System Security Symposium · Cited by 734
You've been warned: an empirical study of the effectiveness of web browser phishing warnings
Egelman, S., Cranor, L. F., & Hong, J. (2008) · Proceedings of the SIGCHI Conference on Human Factors in Computing Systems · doi:10.1145/1357054.1357219 · Cited by 607
Understanding Android Security
Enck, W., Ongtang, M., & McDaniel, P. (2009) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2009.26 · Cited by 544
Apex: extending Android permission model and enforcement with user-defined runtime constraints
Nauman, M., Khan, S., & Zhang, X. (2010) · Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security · doi:10.1145/1755688.1755732 · Cited by 528
Cited by
Privacy in the Smart City—Applications, Technologies, Challenges, and Solutions
Eckhoff, D., & Wagner, I. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2017.2748998 · Cited by 287
Security and Privacy Analysis of Mobile Health Applications: The Alarming State of Practice
Papageorgiou, A., Strigkos, M., Politou, E., Alepis, E., Solanas, A., & Patsakis, C. (2018) · IEEE Access · doi:10.1109/access.2018.2799522 · Cited by 236
SoK: SSL and HTTPS: Revisiting Past Challenges and Evaluating Certificate Trust Model Enhancements
Clark, J., & van Oorschot, P. C. (2013) · 2013 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2013.41 · Cited by 224
Brubaker, C., Jana, S., Ray, B., Khurshid, S., & Shmatikov, V. (2014) · 2014 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2014.15 · Cited by 218
What the App is That? Deception and Countermeasures in the Android User Interface
Bianchi, A., Corbetta, J., Invernizzi, L., Fratantonio, Y., Kruegel, C., & Vigna, G. (2015) · 2015 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2015.62 · Cited by 147
Metadata
- Authors
- Fahl, S., Harbach, M., Muders, T., Baumgärtner, L., Freisleben, B., & Smith, M.
- Venue
- Proceedings of the 2012 ACM conference on Computer and communications security
- Publisher
- ACM
- Published
- 2012-10-16
- Pages
- 50-61
- ISSN
- 1543-7221 (ISSN-L)
- OpenAlex
- W2103370348
- Cited by
- 490
- References
- 24
- FWCI
- 34.98
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Why eve and mallory love android: an analysis of android SSL (in)security. https://app.cochat.ai/papers/10.1145/2382196.2382205
- The paper
- Fahl, S., Harbach, M., Muders, T., Baumgärtner, L., Freisleben, B., & Smith, M. (2012). Why eve and mallory love android: an analysis of android SSL (in)security. Proceedings of the 2012 ACM conference on Computer and communications security. https://doi.org/10.1145/2382196.2382205
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
