返回
Analyzing Android Taint Analysis Tools: FlowDroid, Amandroid, and DroidSafe
DOI:10.1109/TSE.2021.3109563.png)
摘要
En 中文
Numerous static taint analysis techniques have recently been proposed for identifying information flows in mobile applications. These techniques are often optimized and evaluated on a set of synthetic benchmarks, which makes the comparison results difficult to generalize. Moreover, the techniques are commonly compared under different configuration setups, rendering the comparisons inaccurate. In this paper, we provide a large, controlled, and independent comparison of the three most prominent static taint analysis tools: FlowDroid, Amandroid, and DroidSafe. We align the configuration setup for the tools and evaluate them on both a set of common benchmarks and on real applications from the Google Play app store. We further evaluate the effectiveness of additional reflection handling mechanism implemented by DroidRA, applying it to each of the evaluated tools. We compare the results of our analysis to the results reported in previous studies, identify main reasons for inaccuracy in existing tools, and provide suggestions for future research.
Keyword:
Tools
Benchmark testing
Internet
Smart phones
Sensitivity
Mobile applications
Codes
Static analysis
taint analysis
mobile applications
empirical studies
reproducibility studies
期刊
IF:
5.6
论文数:
2.9K
被引数:
1.1W
机构
引用论文
Germination responses to seed-rhizosphere hypoxia in relation to waterlogging tolerance of soybean
Vegetos
IF0
Physicochemical Characteristics of the Birnessite and Todorokite Synthesized Using Various Methods
Minerals
IF0
Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android AppsAmandroid: 一种用于Android应用安全审查的精确通用组件间数据流分析框架

