一句话：针对 Android 应用分析因库代码导致的扩展性问题，提出区分应用与库代码以缩小分析范围。
随着应用数量增长和功能增强，现有 Android 应用分析在处理真实应用时常常因规模过大而失效。核心瓶颈在于分析工具无法区分应用代码与库代码，因此总是分析整个代码库。然而在许多场景下这并不必要，例如检查安全属性时，可信库不应被分析。论文围绕任意 Android 应用分析的规模化问题，研究将应用代码与库代码分离，从而允许分析按需排除可信库或无关库，缩减分析范围，提升分析对现代真实应用的可扩展性。
More apps are published every day and the functionality of each app increases steadily as well. Consequently app analyses are often overwhelmed when confronted with up-to-date, real-world apps. One of the biggest issues originates from the scalability of analyses with respect to libraries. Analyses, more precisely the tools implementing them, cannot distinguish the app’s code from the code of a library. Always analyzing the whole code base is the result. However, this is usually not necessary, for example, when a security property is checked, trusted libraries must not be analyzed.
DOI 原文 ·
@inproceedings{paperbot7148,
title = {Scaling Arbitrary Android App Analyses},
author = {Felix Pauck},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3561339}
}