一句话:提出协作式 Android 应用污点分析,通过多工具协同应对单一工具选择与组合难题。
近年来,针对 Android 应用污点分析的工具大量涌现,用于检测应用中有意或无意造成的数据泄露。这些工具往往专门处理反射、应用间通信等阻碍精确分析的特定特性,因而适用性和可组合性各异。面对具体分析任务时,即便是经验丰富的用户也难以选择合适的工具或工具组合,这阻碍了污点分析的成功采用。本文(标题所指)提出协作式 Android 应用分析,旨在通过多个分析工具之间的协同来克服单一工具的局限;摘要未给出具体协作机制与实验评估细节。
Recent years have seen the development of numerous tools for the analysis of taint flows in Android apps. Taint analyses aim at detecting data leaks, accidentally or by purpose programmed into apps. Often, such tools specialize in the treatment of specific features impeding precise taint analysis (like reflection or inter-app communication). This multitude of tools, their specific applicability and their various combination options complicate the selection of a tool (or multiple tools) when faced with an analysis instance, even for knowledgeable users, and hence hinders the successful adoption of taint analyses.
DOI 原文 ·
@inproceedings{paperbot5104,
title = {Together strong: cooperative Android app analysis},
author = {Felix Pauck and Heike Wehrheim},
booktitle = {FSE},
year = {2019},
doi = {10.1145/3338906.3338915}
}