You shouldn't collect my secrets: thwarting sensitive keystroke leakage in mobile IME apps
SpanDex: secure password tracking for android