一句话：提出以指针分析为中心的 Android 安全漏洞检测框架，统一处理别名与 Android 特性，兼顾精度、速度与鲁棒性。
现有 FlowDroid、IccTA、P/Taint、Amandroid、DroidSafe 等框架推动了 Android 安全静态分析，但常有冗余计算、依赖独立工具和过度复杂等效率问题。本文提出 PacDroid，以指针分析为中心统一管理别名信息、过程间值传播及所支持的 Android 特性（包括 ICC、生命周期等）。广泛评估显示，PacDroid 在可靠性—精确性权衡（F-measure）上优于当前最佳框架，分析速度和鲁棒性也更佳；并发现 77 个真实安全漏洞流，分布于 23 个真实应用，均被其他框架遗漏。其易扩展并提供基础设施，有望成为未来 Android 分析的基础框架。
General frameworks such as FlowDroid, IccTA, P/Taint, Amandroid, and DroidSafe have significantly advanced the development of static analysis tools for Android security by providing fundamental facilities for them. However, while these frameworks have been instrumental in fostering progress, they often operate with inherent inefficiencies, such as redundant computations, reliance on separate tools, and unnecessary complexity, which are rarely scrutinized by the analysis tools that depend on them. This paper introduces PacDroid, a new static analysis framework for detecting security vulnerabilities in Android apps. PacDroid employs a simple yet effective pointer-analysis-centric approach that naturally manages alias information, interprocedural value propagation, and all Android features it supports (including ICC, lifecycles, and miscs), in a unified manner. Our extensive evaluation reveals that PacDroid not only outperforms state-of-the-art frameworks in achieving a superior trade-off between soundness and precision (F-measure) but also surpasses them in both analysis speed and robustness; moreover, PacDroid successfully identifies 77 real security vulnerability flows across 23 real-world Android apps that were missed by all other frameworks. With its ease of extension and provision of essential facilities, PacDroid is expected to serve as a foundational framework for various future analysis applications for Android.
DOI 原文 ·
@inproceedings{paperbot8911,
title = {PacDroid: A Pointer-Analysis-Centric Framework for Security Vulnerabilities in Android Apps},
author = {Menglong Chen and Tian Tan and Minxue Pan and Yue Li},
booktitle = {ICSE},
year = {2025},
doi = {10.1109/icse55347.2025.00208}
}