CEMDA: detecting android complex file events to infer the user's mental model. - Michael J. May; Yaakov Cohen; Hovav Menachem; Yogev Swisa (SAC, 2022)