一句话：提出 Adlib，一个用于分析移动广告平台库的工具，帮助揭示其权限之外的潜在敏感功能与行为。
移动广告利用设备信息与用户交互实现精准投放，但移动广告平台 SDK（AdSDK）被集成到应用时，开发者往往只被告知其所需权限，而难以了解这些 SDK 向广告开放的具体功能，这可能带来设备信息窃取或恶意行为风险。本文提出 Adlib，一个面向移动广告平台库的分析器，旨在对 AdSDK 进行分析，以揭示其权限声明之外的丰富功能及其潜在安全影响。摘要未给出具体分析技术、实现细节与实验评估，因此其核心贡献被定位为针对移动广告平台库这一特殊软件组件的分析工具与问题提出。
Mobile advertising has become a popular advertising approach by taking advantage of various information from mobile devices and rich interaction with users. Mobile advertising platforms show advertisements of nearby restaurants to users using the geographic locations of their mobile devices, and also allow users to make reservations easily using their phone numbers. However, at the same time, they may open the doors for advertisements to steal device information or to perform malicious behaviors. When application developers integrate mobile advertising platform SDKs (AdSDKs) to their applications, they are informed of only the permissions required by the AdSDKs, and they may not be aware of the rich functionalities of the SDKs that are available to advertisements.
DOI 原文 ·
@inproceedings{paperbot5361,
title = {Adlib: analyzer for mobile ad platform libraries},
author = {Sungho Lee and Sukyoung Ryu},
booktitle = {ISSTA},
year = {2019},
doi = {10.1145/3293882.3330562}
}