一句话:提出 MiniMon 框架,依据特定用户与应用的交互日志去除 Android 应用中的冗余功能,以缩减体积并减小攻击面。
为满足多样化用户的需求,Android 应用的体积不断膨胀,但单个用户往往只使用其中一部分功能;这些多余且非所需的功能会扩大攻击面,并额外占用存储与内存等系统资源。为此,作者提出 MiniMon 框架,通过记录特定用户与应用的实际交互日志,识别并去除与该用户无关的功能,从而对应用实施去臃肿(debloating)。其核心思路是以监控得到的用户行为作为取舍依据,只保留用户实际使用到的部分。摘要仅给出框架层面的概述,未说明具体的实现机制与实验评估结果。
The size of Android applications is getting larger to fulfill the requirements of various users. However, not all the features of the applications are needed and desired by a specific user. The unnecessary and non-desired features can increase the attack surface and consume system resources such as storage and memory. To address this issue, we propose a framework, MiniMon, to debloat unnecessary features from an Android app based on the logs of specific users' interactions with the app.
@inproceedings{paperbot11277,
title = {MiniMon: Minimizing Android Applications with Intelligent Monitoring-Based Debloating},
author = {Jiakun Liu and Zicheng Zhang and Xing Hu and Ferdian Thung and Shahar Maoz and Debin Gao and Eran Toch and Zhipeng Zhao and David Lo},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3639113}
}