arrow
返回

Android Source Code Vulnerability Detection: A Systematic Literature Review

delete2023-01-16
delete22
delete
OA
AI
J
Janaka Senanayake *
H
Harsha Kalutarage
M
M. Omar Al-Kadri
A
Andrei Petrovski
L
Luca Piras
DOI:10.1145/3556974delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The use of mobile devices is rising daily in this technological era. A continuous and increasing number of mobile applications are constantly offered on mobile marketplaces to fulfil the needs of smartphone users. Many Android applications do not address the security aspects appropriately. This is often due to a lack of automated mechanisms to identify, test, and fix source code vulnerabilities at the early stages of design and development. Therefore, the need to fix such issues at the initial stages rather than providing updates and patches to the published applications is widely recognized. Researchers have proposed several methods to improve the security of applications by detecting source code vulnerabilities and malicious codes. This Systematic Literature Review (SLR) focuses on Android application analysis and source code vulnerability detection methods and tools by critically evaluating 118 carefully selected technical studies published between 2016 and 2022. It highlights the advantages, disadvantages, applicability of the proposed techniques, and potential improvements of those studies. Both Machine Learning (ML)-based methods and conventional methods related to vulnerability detection are discussed while focusing more on ML-based methods, since many recent studies conducted experiments with ML. Therefore, this article aims to enable researchers to acquire in-depth knowledge in secure mobile application development while minimizing the vulnerabilities by applying ML methods. Furthermore, researchers can use the discussions and findings of this SLR to identify potential future research and development directions.
Keyword:
Source code vulnerability
vulnerability detection
software security
Android security
machine learning

期刊

ACM Computing Surveys 封面图
ACM Computing Surveys
IF:
28
论文数:
2.5K
被引数:
3.5W

机构

U
university kelaniya
学者数:
992
论文数: 686
被引数: 2
M
Middlesex University
学者数:
1.6K
论文数: 1.9K
被引数: 56
引用论文

引用论文

Exploring the ability of cations to facilitate binding between inorganic oxyanions and humic acid
err2017-01-01
err0
errOAAI
errDavid P. Martin; Jennifer M. Seiter; Brandon J. Lafferty; Anthony J. Bednar
err分享
err收藏
Heat storage capacity of sodium acetate trihydrate during thermal cycling
err1984-01-01
err0
PREAI
errTakahiro Wada; Ryoichi Yamamoto; Yoshihiro Matsuo
err分享
err收藏
Measurement of the Lamb shift in then= 2 state of muonium
err1990-01-01
err0
PREAI
errK. A. Woodle; A. Badertscher; V. W. Hughes; D. C. Lu; M. W. Ritter; M. Gladisch; H. Orth; G. zu Putlitz; M. Eckhause; J. Kane; F. G. Mariam
err分享
err收藏
Ionenstrahlspektroskopie mit Wasserstoffionen als Primärteilchen
err2005-03-15
err0
PREAI
errR. Tielert; H. H. Bukow; P. H. Heckmann; R. Woodruff; H. v. Buttlar
err分享
err收藏
学者 查看更多内容