VulHunter: Toward discovering vulnerabilities in android applications

IEEE Micro

Volumn 35, Issue 1, 2015, Pages 44-53

  Qian, Chenxiong ^a   Luo, Xiapu ^a   Le, Yu ^a   Gu, Guofei ^b  

^a HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

^b TEXAS A AND M UNIVERSITY   (United States)

Author keywords

Android applications; app property graph; static analysis; vulnerabilities detection

Indexed keywords

MOBILE SECURITY; STATIC ANALYSIS;

ANALYSIS FRAMEWORKS; ANDROID APPLICATIONS; APP PROPERTY GRAPH; DEVELOPMENT CYCLE; EFFECTIVENESS AND EFFICIENCIES; EXPONENTIAL GROWTH; GRAPH TRAVERSALS; IDENTIFICATION PROCESS;

ANDROID (OPERATING SYSTEM);

EID: 84925070537     PISSN: 02721732     EISSN: None     Source Type: Journal    
DOI: 10.1109/MM.2015.25     Document Type: Article

References (7)

1. F. Yamaguchi et al., "Modeling and Discovering Vulnerabilities with Code Property Graphs," Proc. IEEE Symp. Security and Privacy, 2014, pp. 590-604.
2. J. King, "Symbolic Execution and Program Testing," Comm. ACM, vol. 19, no. 7, 1976, pp. 385-394.
3. Y. Zheng, X. Zhang, and V. Ganesh, "Z3-str: A z3-Based String Solver for Web Application Analysis," Proc. 9th Joint Meeting Foundations of Software Eng. (ESEC/FSE 13), 2013, pp. 114-124.
4. O. Lhotak and L.J. Hendren, "Scaling Java Points-to Analysis Using Spark," Proc. 12th Int'l Conf. Compiler Construction (CC 03), 2003, pp. 153-169.
5. M. Grace et al., "Systematic Detection of Capability Leaks in Stock Android Smartphones," Proc. Network and Distributed System Security Symp. (NDSS 12), 2012; www .internetsociety.org/systematic-detection-capability-leaks-stock-android-smartphones.
6. T. Lengauer and R.E. Tarjan, "A Fast Algorithm for Finding Dominators in a Flowgraph," ACM Trans. Programming Languages and Systems, vol. 1, no. 1, 1979, pp. 121-141.
7. D. Sounthiraraj et al., "SMV-Hunter: Large Scale, Automated Detection of SSL/TLS Man-in-the-Middle Vulnerabilities in Android Apps," Proc. Network and Distributed System Security Symp. (NDSS 14), 2014; www.internetsociety.org/doc/smv-hunter-large-scale-automated-detection-ssltls-man-middle-vulnerabilities-android-apps.