一句话:提出基于 Frida 的端侧工具,可在已 root Android 上运行时欺骗传感器与系统信号,支持可复现的上下文相关应用测试。
移动应用依赖实时传感器与系统数据调整行为,但模拟器或插桩构建难以在真机上对上下文敏感行为进行可复现测试。PriviSense 是一个基于 Frida 的端侧工具包,面向已 root 的 Android 设备,通过脚本向未修改应用注入时变的传感器流(加速度计、陀螺仪、计步器)和系统值(电量、系统时间、设备元数据),实现运行时欺骗。演示在已 root 设备上对五个代表性传感器可视化应用验证了实时欺骗,支持可脚本化、可逆的值操控,便于测试应用逻辑、揭示基于上下文的行为并开展隐私分析。代码经审核研究者按需共享。
Mobile apps increasingly rely on real-time sensor and system data to adapt their behavior to user context. While emulators and instrumented builds offer partial solutions, they often fail to support reproducible testing of context-sensitive app behavior on physical devices. We present PriviSense, a Frida-based, on-device toolkit for runtime spoofing of sensor and system signals on rooted Android devices. PriviSense can script and inject time-varying sensor streams (accelerometer, gyroscope, step counter) and system values (battery level, system time, device metadata) into unmodified apps, enabling reproducible on-device experiments without emulators or app rewrites. Our demo validates real-time spoofing on a rooted Android device across five representative sensor-visualization apps. By supporting scriptable and reversible manipulation of these values, PriviSense facilitates testing of app logic, uncovering of context-based behaviors, and privacy-focused analysis. To ensure ethical use, the code is shared upon request with verified researchers. Tool Guide: How to Run PriviSense on Rooted Android https://bit.ly/privisense-guide Demonstration video: https://www.youtube.com/watch?v=4Qwnogcc3pw
DOI 原文 · arXiv · PDF(开放获取) · DBLP
@inproceedings{abs-2601-22414,
title = {PriviSense: A Frida-Based Framework for Multi-Sensor Spoofing on Android},
author = {Ibrahim Khalilov and Chaoran Chen and Ziang Xiao and Tianshi Li and Toby Jia-Jun Li and Yaxing Yao},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3774748.3787601}
}