一句话：首次系统研究 Android 多窗口资源冲突，分类根因、构建静态检测器并在 15 万+应用中验证其普遍性与安全性影响。
本文关注 Android 多窗口模式下多个应用窗口并发访问同一系统资源所引发的多窗口资源冲突（MRC），这类问题可能导致崩溃、功能失效或非预期行为。作者首先进行根因分析，依据触发模式和受影响的资源状态将 MRC 分为三类。为支持大规模检测，提出静态分析框架 MRC-Detector，可自动识别 Android 应用中的 MRC 问题，并通过人工验证确认其高准确性与有效性。随后在 F-droid 和 Google Play 的 15 万余个真实应用上检测，揭示 MRC 风险的普遍性，并从 MRC 类型、APK 大小、应用来源和安全分类等维度分析其分布。开发者反馈中获得 14 个来自厂商与项目维护者的积极回应，最后讨论了综合缓解策略。
The multi-window mode in Android has greatly improved productivity and usability by allowing multiple apps to run concurrently. However, alongside the advantages, such mode also introduces unforeseen risks in both functionality and security. In this work, we present the first systematic study to identify a previously unexplored class of issues, termed Multi-window Resource Conflicts (MRCs). Such conflicts occur when multiple app windows access the same system resource concurrently, potentially leading to crashes, functionality failures or unintended behaviors. To enhance the robustness and security of Android multi-window execution, we conduct a systematic and in-depth empirical study on the MRCs. We begin with a comprehensive root cause analysis, categorizing MRCs into three fundamental types based on their triggering patterns and affected resource states. To enable large-scale detection, we develop MRC-Detector, a static analysis framework that automatically identifies MRC issues in Android apps. Our manual verification confirms its high accuracy and effectiveness. We apply the MRC-Detector to the detection of over 150k real-world apps from F-droid and Google Play, uncovering the prevalence of MRC risks. Additionally, the distribution of MRC issues is analyzed in depth across multiple dimensions, including MRC type, APK size, app source and security classification. We further investigated the recognition and confirmation from developers and received 14 positive responses from vendors and project maintainers. Finally, comprehensive mitigation strategies are discussed. The materials of the study are available at: https://github.com/Huimilia/MRC.
DOI 原文 ·
@inproceedings{paperbot9579,
title = {Don’t Mess with Bro’s Cheese! An Empirical Study of Resource Conflict in Android Multi-window},
author = {Chenkai Guo and Huimin Zhao and Tianhong Wang and Naipeng Dong and Qingqing Dong and Jiarui Che and Yaqiong Qiao and Xiangyang Luo and Zheli Liu},
booktitle = {ASE},
year = {2025},
doi = {10.1109/ase63991.2025.00178}
}