一句话：对 Android 第三方库检测工具在高级混淆（如包层次混淆）下的鲁棒性进行实证研究。
第三方库（TPL）在 Android 应用开发中广泛复用，但其漏洞、过时版本或恶意修改会带来安全风险，因此 TPL 检测与分析至关重要。现有 TPL 检测方法难以应对 Android 应用中常见的代码混淆；尽管已有研究提出抗混淆检测方法，但大多忽略包层次混淆等高级混淆技术。本文开展实证研究，系统考察 Android TPL 检测工具面对高级混淆时的鲁棒性，揭示现有方法在复杂混淆下的局限。
Third-party libraries (TPLs) play a crucial role in Android app development by providing reusable functionalities, improving development efficiency, and reducing time-to-market. However, detecting and analyzing TPLs is essential, as their vulnerabilities, outdated versions, or malicious modifications can introduce security risks and compromise the integrity of Android apps. Existing TPL detection approaches struggle against code obfuscation, a prevalent practice in Android apps. While prior research has explored obfuscation-resistant detection methods, they largely overlook advanced obfuscation techniques such as package hierarchy obfuscation.
@inproceedings{paperbot11944,
title = {An Empirical Study on the Robustness of Android Third-Party Library Detection Tools Against Advanced Obfuscation},
author = {Dahan Pan and Zhuohao Zhang and Yunjia Min and Runhan Feng and Yuanyuan Zhang},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3744916.3773231}
}