Vetting the Security of Mobile Applications [pdf]
nvlpubs.nist.gov