I believe you're referring to the well-known Android security paper: