Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation
Android permissions demystified