paperbot · PL 论文追踪

全部论文 待读 收藏

P2 PriviSense: A Frida-Based Framework for Multi-Sensor Spoofing on Android

PriviSense:一个基于 Frida 的 Android 多传感器欺骗框架
ICSE Proceedings of the 2026 IEEE/ACM 48th International Conference on Software Engineering2026匹配度 1/10 · 该论文提出基于 Frida 的 Android 传感器欺骗工具,属于移动安全与动态测试,不涉及静态分析、LLM/Agent 或浮点/贝叶斯程序分析,与用户研究方向核心无关。引用 0 inbox
Ibrahim Khalilov, Chaoran Chen, Ziang Xiao, Tianshi Li, Toby Jia-Jun Li, Yaxing Yao
crossref: 2026-09-12dblp: 2026-09-12arxiv: 2026-09-12

AI 速览

一句话:提出基于 Frida 的端侧工具,可在已 root Android 上运行时欺骗传感器与系统信号,支持可复现的上下文相关应用测试。

移动应用依赖实时传感器与系统数据调整行为,但模拟器或插桩构建难以在真机上对上下文敏感行为进行可复现测试。PriviSense 是一个基于 Frida 的端侧工具包,面向已 root 的 Android 设备,通过脚本向未修改应用注入时变的传感器流(加速度计、陀螺仪、计步器)和系统值(电量、系统时间、设备元数据),实现运行时欺骗。演示在已 root 设备上对五个代表性传感器可视化应用验证了实时欺骗,支持可脚本化、可逆的值操控,便于测试应用逻辑、揭示基于上下文的行为并开展隐私分析。代码经审核研究者按需共享。

问题
如何在无需模拟器或改写应用的前提下,在真实 Android 设备上可复现地测试依赖实时传感器与系统上下文的移动应用行为?
方法
提出基于 Frida 的端侧工具包 PriviSense,可脚本化、可逆地向未修改的已 root Android 应用注入时变传感器流和系统值。
评估
通过在已 root Android 设备上对五个代表性传感器可视化应用进行演示,验证实时欺骗和对应用逻辑与上下文行为测试的支持。
原文摘要(Abstract)

Mobile apps increasingly rely on real-time sensor and system data to adapt their behavior to user context. While emulators and instrumented builds offer partial solutions, they often fail to support reproducible testing of context-sensitive app behavior on physical devices. We present PriviSense, a Frida-based, on-device toolkit for runtime spoofing of sensor and system signals on rooted Android devices. PriviSense can script and inject time-varying sensor streams (accelerometer, gyroscope, step counter) and system values (battery level, system time, device metadata) into unmodified apps, enabling reproducible on-device experiments without emulators or app rewrites. Our demo validates real-time spoofing on a rooted Android device across five representative sensor-visualization apps. By supporting scriptable and reversible manipulation of these values, PriviSense facilitates testing of app logic, uncovering of context-based behaviors, and privacy-focused analysis. To ensure ethical use, the code is shared upon request with verified researchers. Tool Guide: How to Run PriviSense on Rooted Android https://bit.ly/privisense-guide Demonstration video: https://www.youtube.com/watch?v=4Qwnogcc3pw

链接与引用

DOI 原文 · arXiv · PDF(开放获取) · DBLP

BibTeX
@inproceedings{abs-2601-22414,
  title = {PriviSense: A Frida-Based Framework for Multi-Sensor Spoofing on Android},
  author = {Ibrahim Khalilov and Chaoran Chen and Ziang Xiao and Tianshi Li and Toby Jia-Jun Li and Yaxing Yao},
  booktitle = {ICSE},
  year = {2026},
  doi = {10.1145/3774748.3787601}
}