An Efficient, Robust, and Scalable Approach for Analyzing Interacting Android Apps

Author email: ytsutano@cse.unl.edu
Tool name: JITANA
Description: When multiple apps on an Android platform interact, faults and security vulnerabilities can occur. Software engineers need to be able to analyze interacting apps to detect such problems. Current approaches for performing such analyses, however, do not scale to the numbers of apps that may need to be considered, and thus, are impractical for application to real-world scenarios. In this paper, we introduce Jitana, a program analysis framework designed to analyze multiple Android apps simultaneously. By using a classloader-based approach instead of a compiler-based approach such as Soot, Jitana is able to simultaneously analyze large numbers of interacting apps, perform on-demand analysis of large libraries, and effectively analyze dynamically generated code. Empirical studies of Jitana show that it is substantially more efficient than a state-of-the-art approach, and that it can effectively and efficiently analyze complex apps including Facebook, Pokémon Go, and Pandora that the state-of-the-art approach cannot handle.
Bibtex: @inproceedings{10.1109/ICSE.2017.37, author = {Tsutano, Yutaka and Bachala, Shakthi and Srisa-an, Witawas and Rothermel, Gregg and Dinh, Jackson}, title = {An Efficient, Robust, and Scalable Approach for Analyzing Interacting Android Apps}, year = {2017}, isbn = {9781538638682}, publisher = {IEEE Press}, url = {https://doi.org/10.1109/ICSE.2017.37}, doi = {10.1109/ICSE.2017.37}, booktitle = {Proceedings of the 39th International Conference on Software Engineering}, pages = {324–334}, numpages = {11}, location = {Buenos Aires, Argentina}, series = {ICSE ’17} }
Link to public pdf: https://dl.acm.org/doi/abs/10.1109/ICSE.2017.37
Link to tool webpage: https://github.com/ytsutano/jitana
Link to demo: Not provided by authors
Category: None
Year and Conference: 2017, ICSE
Terms of use