OAuth Demystified for Mobile Application Developers
Systematic Detection of Capability Leaks in Stock Android Smartphones.