An automated testing approach for inter-application security in android

9th International Workshop on Automation of Software Test, AST 2014 - Proceedings

Volumn , Issue , 2014, Pages 8-14

  Guo, Chenkai ^a   Xu, Jing ^a   Yang, Hongji ^b   Zeng, Ying ^a   Xing, Shuang ^a  

^a NANKAI UNIVERSITY   (China)

^b BATH SPA UNIVERSITY   (United Kingdom)

Author keywords

Android; Automated testing; Mobile phone security

Indexed keywords

ANDROID (OPERATING SYSTEM); AUTOMATION; CELLULAR TELEPHONES; COMMERCE; COMPETITION; DYNAMICS; SOFTWARE TESTING; TESTING;

ANDROID; ANDROID APPLICATIONS; APPLICATION COMPONENTS; APPLICATION SECURITY; AUTOMATED TESTING; MOBILE PHONE SECURITIES; MOBILE PHONE SYSTEMS; SECURITY VULNERABILITIES;

MOBILE SECURITY;

EID: 84939507071     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2593501.2593503     Document Type: Conference Paper

References (20)

1. Gartner Says Smartphone Sales Accounted for 55 Percent of Overall Mobile Phone Sales in Third Quarter of 2013 [Online]. http://www.gartner.com/newsroom/id/2623415.
2. Number of available Android applications [Online]. http://www.appbrain.com/stats/number-of-android-apps.
3. Kaspersky Security Bulletin Overall statistics 2013 [Online]. http://www.securelist.com/en/analysis/204792318/Kaspersky -Security-Bulletin-2013-Overall-statistics-for-2013.
4. E. Chin, A. Porter Felt, K. Greenwood, and D. Wagner. 2011. Analyzing Inter-Application Communication in Android. In Proceedings of the 9th International Conference on Mobile Systems, Applications, and Services (Washington, DC, USA, June 28-July 01, 2011). MobiSys'11. ACM, 239-252.
5. "Apktool" [Online].http://code.google.com/p/androidapktool/.
6. "Dedexer" [Online]. http://dedexer.sourceforge.net/.
7. "Dex2jar" [Online]. http://code.google.com/p/dex2jar/.
8. "Smali" [Online]. http://code.google.com/p/smali/.
9. "Robotium" [Online]. http://code.google.com/p/robotium/.
10. P. Godefroid. 2007. Compositional Dynamic Test Generation. In Proceedings of the 34th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (Nice, France, Jan 17-19, 2007). POPL'07. ACM, 47-54.
11. D. Balzarotti, M. Cova, V. Felmetsger, N. Jovanovic, E. Kirda, C. Kruegel, and G. Vigna. 2008. Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. In IEEE Symposium on Security and Privacy (Oakland, California, USA, May 18-21, 2008). IEEE Computer Society, 387-401.
12. C. Hu and I. Neamtiu. 2011. Automating gui testing for android applications. In Proceeding of the 6th International Workshop on Automation of Software Test (Hawaii, USA, May 21-28, 2011). ACM, 77-83.
13. D. Amalfitano, A.R.Fasolino, P.Tramantana. 2011. A GUI Crawling-Based Technique for Android Mobile Application Testing. In Software Testing, Verification and Validation Workshops (Berlin, Germany, Mar 21-25). ICSTW'11. IEEE Computer Society, 252-261.
14. D. Amalfitano, A.R. Fasolino, P. Tramontana, S.D. Carmine and A.M. Memon. 2012. Using gui ripping for automated testing of android applications. In Proceeding of the 27th IEEE/ACM International Conference on Automated Software Engineering (Essen, Germany, Sep 03-07, 2012). ASE'12. 258-261.
15. W. Yang, M. Prasad and T. Xie. 2013. A Grey-box Approach for Automated GUI-Model Generation of Mobile Applications. In 16th International Conference on Fundamental Approaches to Software Engineering (Rome, Italy, Mar 16-24, 2013). FASE'13. Springer, 250-265.
16. R. Mahmood, N. Esfahani, T. Kacem, N. Mirzaei, S. Malek, and A. Stavrou. 2012. A Whitebox Approach for Automated Security Testing of Android Applications on the Cloud. In Proceeding of the 7th International Workshop on Automation of Software Test (Zürich, Switzerland, June 2-9, 2012). ACM, 22-28.
17. W. Enck, M. Ongtang, and P. McDaniel. 2009. Understanding Android security. IEEE Security and Privacy. 7, 1 (Jan-Feb. 2009), 50-57.
18. M. Ongtang, S. Mclaughlin, W. Enck, and P. Mcdaniel. 2009. Semantically rich application-centric security in android. In Annual Computer Security Applications Conference (Hawaii, USA, Dec 07-11, 2009). ACSAC'09.
19. W. Enck, P. Gilbert, B. gon Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. 2010. Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones. In 8th USENIX Symposium on Operating Systems Design and Implementation (Vancouver, Canada, Oct 04-06, 2010). OSDI'10.
20. V. Rastogi, Y. Chen, and W. Enck. 2013. AppsPlayground: Automatic Security Analysis of Smartphone Applications. In Third ACM Conference on Data and Application Security and Privacy (San Antonio, TX, USA, Feb 18-20, 2013). CODASPY'13. ACM, 209-220.