paperbot · PL 论文追踪

全部论文 待读 收藏

P2 AutoDebloater: Automated Android App Debloating

AutoDebloater:自动化 Android 应用去膨胀
ASE 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE)2023匹配度 2/10 · 该论文是 Android 应用去膨胀(debloating)的自动化工具,核心在移动安全与程序分析,不涉及用户画像关注的 ML/Agentic 程序静态分析、LLM 与静态分析/形式化验证的交叉、浮点程序分析或贝叶斯程序分析。虽然标签含程序分析,但研究目标与用户方向差距较大。引用 1 inbox
Jiakun Liu, Xing Hu, Ferdian Thung, Shahar Maoz, Eran Toch, Debin Gao, David Lo
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:AutoDebloater 自动探索并展示 Activity 转换图,让用户选择并移除不需要的 Activity,以精简 Android 应用。

Android 应用功能日益膨胀,但用户并不需要全部功能;冗余功能会扩大攻击面并增加存储与内存开销。终端用户难以全面探索应用以识别可删除功能,且缺少自助精简工具。作者提出 AutoDebloater:一个浏览器可访问的 Web 应用,可自动探索目标应用并识别 Activity 间转换,构建 Activity Transition Graph(ATG)呈现给用户;用户选择不需保留的 Activity 后,工具自动将其移除。作者在来自 Google Play 与 F-Droid 的 Finance、Tools、Navigation 三类共五个 Android 应用上开展用户研究。结果表明,用户对精简应用的稳定性以及工具发现此前未注意功能的能力感到满意。

问题
Android 应用功能膨胀导致冗余功能,增加攻击面和资源开销;终端用户难以自行识别并移除不需要的功能,且缺乏现成去膨胀工具。
方法
AutoDebloater 是一个 Web 应用,自动探索应用并识别 Activity 转换,生成 Activity Transition Graph 供用户选择,随后自动移除所选 Activity。
评估
在 Google Play 和 F-Droid 的 Finance、Tools、Navigation 三类五个 Android 应用上开展用户研究,用户对去膨胀后稳定性及发现未注意功能的能力表示满意。
原文摘要(Abstract)

Android applications are getting bigger with an increasing number of features. However, not all the features are needed by a specific user. The unnecessary features can increase the attack surface and cost additional resources (e.g., storage and memory). Therefore, it is important to remove unnecessary features from Android applications. However, it is difficult for the end users to fully explore the apps to identify the unnecessary features, and there is no off-the-shelf tool available to assist users to debloat the apps by themselves. In this work, we propose AutoDebloater to debloat Android applications automatically for end users. AutoDebloater is a web application that can be accessed by end-users through a web browser. In particular, AutoDebloater can automatically explore an app and identify the transitions between activities. Then, AutoDebloater will present the Activity Transition Graph to users and ask them to select the activities they do not want to keep. Finally, AutoDebloater will remove the activities that are selected by users from the app. We conducted a user study on five Android apps downloaded from three categories (i.e., Finance, Tools, and Navigation) in Google Play and F-Droid. The results show that users are satisfied with AutoDebloater in terms of the stability of the debloated apps and the ability of AutoDebloater to identify features that are never noticed before. The tool is available at http://autodebloater.club. The code is available at https://github.com/jiakun-liu/autodebloater/ and the demonstration video can be found at https://youtu.be/Gmz0-p2n9D4.

链接与引用

DOI 原文 · PDF(开放获取) · DBLP

BibTeX
@inproceedings{LiuHTMTGL23,
  title = {AutoDebloater: Automated Android App Debloating},
  author = {Jiakun Liu and Xing Hu and Ferdian Thung and Shahar Maoz and Eran Toch and Debin Gao and David Lo},
  booktitle = {ASE},
  year = {2023},
  doi = {10.1109/ase56229.2023.00017}
}