An empirical study of cryptographic misuse in android applications
Apex: extending Android permission model and enforcement with user-defined runtime constraints