Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation
CHEX: statically vetting Android apps for component hijacking vulnerabilities