Android permissions: a perspective combining risks and benefits
Apex: extending Android permission model and enforcement with user-defined runtime constraints