DOCSLIB.ORG

Race Detection for Android Applications

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Race Detection for Android Applications Race Detection for Android Applications Pallavi Maiya Aditya Kanade Rupak Majumdar Indian Institute of Science Indian Institute of Science MPI-SWS [email protected] [email protected] [email protected] Abstract asynchronous tasks to each other. Asynchronous tasks running on the same thread may themselves be reordered non-deterministically Programming environments for smartphones expose a concur- subject to certain rules. While the model can effectively hide laten- rency model that combines multi-threading and asynchronous event- cies, enabling innovative features, programming is complex and pro- based dispatch. While this enables the development of efficient and grams can have many subtle bugs due to non-determinism. feature-rich applications, unforeseen thread interleavings coupled In this paper, we formalize the concurrency semantics of the An- with non-deterministic reorderings of asynchronous tasks can lead droid programming model. Coming up with this formalization re- to subtle concurrency errors in the applications. quired a thorough study of the Android framework and a careful In this paper, we formalize the concurrency semantics of the An- mapping of execution scenarios in Android to more formal execu- happens-before droid programming model. We further define the tion traces. We view an Android application as comprising multi- relation for Android applications, and develop a dynamic race de- ple asynchronous tasks that are executed on one or more threads. tection technique based on this relation. Our relation generalizes An asynchronous task, once started on a thread, runs to completion the so far independently studied happens-before relations for multi- and can make both synchronous and asynchronous procedure calls. threaded programs and single-threaded event-driven programs. Ad- An asynchronous procedure call results in enqueuing of an asyn- ditionally, our race detection technique uses a model of the Android chronous task to the task queue associated with the thread to which it runtime environment to reduce false positives. is posted and control immediately returns to the caller. While the An- We have implemented a tool called DROIDRACER. It generates droid runtime environment creates some threads for the application execution traces by systematically testing Android applications and initially, the application may also spawn threads. A newly spawned detects data races by computing the happens-before relation on thread behaves as a usual thread, but additionally, it can attach a task 15 the traces. We analyzed Android applications including popular queue to itself and receive asynchronous tasks for execution. Often, applications such as Facebook, Twitter and K-9 Mail. Our results an application works with some threads with task queues and others indicate that data races are prevalent in Android applications, and without. In this work, we focus on the semantics of individual ap- that DROIDRACER is an effective tool to identify data races. plications running within their own processes, and omit formalizing Categories and Subject Descriptors D.2.4 [Software Engineer- inter-process communication (IPC) between different applications. ing]: Software/Program Verification; D.2.5 [Software Engineer- Based on the concurrency semantics, we define a happens-before ing]: Testing and Debugging; F.3.1 [Logics and Meanings of Pro- relation over operations in execution traces [15]. A naïve combi- grams]: Specifying and Verifying and Reasoning about Programs nation of rules for asynchronous procedure calls and lock-based syn- chronization introduces spurious happens-before orderings. Specif- General Terms Languages, Reliability, Verification ically, it induces an ordering between two asynchronous tasks run- Keywords Data races, Android concurrency semantics, Happens- ning on the same thread if they use the same lock. This is a spu- before reasoning rious ordering since locks cannot enforce an ordering among tasks running sequentially on the same thread. We overcome this diffi- 1. INTRODUCTION culty by decomposing the relation into (1) a thread-local happens- Touchscreen mobile devices such as smartphones and tablets before relation st which captures the ordering constraints between have become an integral part of our lives. These new devices have asynchronous tasks posted to the same thread and (2) an inter- caught the imagination of the developer community and the end- thread happens-before relation mt which captures the ordering users alike. We are witnessing a significant shift of computing from constraints among multiple threads. These relations are composed desktops to mobile devices. in such a way that the resulting relation captures the happens-before While their hardware is limited in many ways, smartphones have orderings in the Android concurrency model precisely. succeeded in providing programming environments that enable de- We develop a data race detection algorithm based on the happens- velopment of efficient and feature-rich applications. These environ- before relation. A data race occurs if there are two accesses to the ments expose an expressive concurrency model that combines multi- same memory location, with at least one being a write, such that threading and asynchronous event-based dispatch. In this model, there is no happens-before ordering between them. Race detection multiple threads execute concurrently and, in addition, may post for multi-threaded programs is a well-researched topic (e.g., [18, 21, 22, 25, 28]). Recently, race detection for single-threaded event- Permission to make digital or hard copies of all or part of this work for personal or driven programs (also called asynchronous programs) is studied in classroom use is granted without fee provided that copies are not made or distributed the context of client-side web applications (e.g., [20, 24, 30]). Unfor- for profit or commercial advantage and that copies bear this notice and the full citation tunately, race detection for Android applications requires reasoning on the first page. Copyrights for components of this work owned by others than ACM about both thread interleavings and event dispatch; ignoring one or must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a the other leads to false positives. Our happens-before relation gener- fee. Request permissions from [email protected]. alizes these, so far independently studied, happens-before relations PLDI’14, June 9 – June 11, 2014, Edinburgh, United Kingdom. for multi-threaded programs and single-threaded event-driven pro- Copyright c 2014 ACM 978-1-4503-2784-8/14/06. $15.00. grams, enabling precise race detection for Android applications. http://dx.doi.org/10.1145/2594291.2594311 We have implemented our race detection algorithm in a tool 1 public class DwFileAct extends Activity { called DROIDRACER.DROIDRACER provides a framework that 2 boolean isActivityDestroyed = false; generates UI events to systematically test an Android application. 3 It runs unmodified binaries on an instrumented Dalvik VM and in- 4 protected void onResume( ) { 5 super.onResume( ); strumented Android libraries. A run of the application produces an 6 new FileDwTask(this).execute("http://abc/song.mp3"); execution trace, which is analyzed offline for data races by comput- 7 } ing the happens-before relation. The control flow between different 8 public void onPlayClick(View v) { procedures of an Android application is managed to a large extent 9 Intent intent = new Intent(this, MusicPlayActivity.class); 10 intent.putExtra("file", "/sdcard/song.mp3"); by the Android runtime through callbacks. DROIDRACER uses a 11 startActivity(intent); model of the Android runtime environment to reduce false positives 12 } that would be reported otherwise. Further, DROIDRACER assists in 13 protected void onDestroy( ) { debugging the data races by classifying them based on criteria such 14 super.onDestroy( ); 15 isActivityDestroyed = true; as whether one involves multiple threads posting to the same thread 16 } or two co-enabled events executing in an interleaved manner. 17 ... We analyzed 10 open-source Android applications together com- 18 } prising 200K lines of code, and used them to improve the accuracy 19 20 public class FileDwTask extends AsyncTask<String, Integer, Void> { of DROIDRACER. We then applied DROIDRACER on 5 proprietary 21 DwFileAct act; applications including popular and mature applications like Face- 22 ProgressDialog dialog; book and Twitter. Our results indicate that data races are prevalent 23 in Android applications and that DROIDRACER is an effective tool 24 public FileDwTask(DwFileAct act) { 25 this.act = act; to identify data races. Of the 215 races reported by DROIDRACER 26 } on 10 open source Android applications, 80 were verified to be true 27 protected void onPreExecute( ) { positives and 6 of these were found to exhibit bad behaviours. 28 super.onPreExecute( ); In summary, this paper makes the following contributions: 29 dialog = new ProgressDialog(act); 30 ... • The first formulation of Android concurrency semantics. 31 dialog.show( ); • 32 } An encoding of the happens-before relation for Android which 33 protected Void doInBackground(String... params) { generalizes happens-before relations for multi-threaded pro- 34 InputStream input = ... grams and single-threaded event-driven programs. 35 ... • A tool for dynamic race detection augmented with systematic 36 byte data[] = new
Load more

Recommended publications
  • Android (Operating System) 1 Android (Operating System)
    Android (operating system) 1 Android (operating system) Android Home screen displayed by Samsung Nexus S with Google running Android 2.3 "Gingerbread" Company / developer Google Inc., Open Handset Alliance [1] Programmed in C (core), C++ (some third-party libraries), Java (UI) Working state Current [2] Source model Free and open source software (3.0 is currently in closed development) Initial release 21 October 2008 Latest stable release Tablets: [3] 3.0.1 (Honeycomb) Phones: [3] 2.3.3 (Gingerbread) / 24 February 2011 [4] Supported platforms ARM, MIPS, Power, x86 Kernel type Monolithic, modified Linux kernel Default user interface Graphical [5] License Apache 2.0, Linux kernel patches are under GPL v2 Official website [www.android.com www.android.com] Android is a software stack for mobile devices that includes an operating system, middleware and key applications.[6] [7] Google Inc. purchased the initial developer of the software, Android Inc., in 2005.[8] Android's mobile operating system is based on a modified version of the Linux kernel. Google and other members of the Open Handset Alliance collaborated on Android's development and release.[9] [10] The Android Open Source Project (AOSP) is tasked with the maintenance and further development of Android.[11] The Android operating system is the world's best-selling Smartphone platform.[12] [13] Android has a large community of developers writing applications ("apps") that extend the functionality of the devices. There are currently over 150,000 apps available for Android.[14] [15] Android Market is the online app store run by Google, though apps can also be downloaded from third-party sites.
    [Show full text]
  • Android Operating System
    Software Engineering ISSN: 2229-4007 & ISSN: 2229-4015, Volume 3, Issue 1, 2012, pp.-10-13. Available online at http://www.bioinfo.in/contents.php?id=76 ANDROID OPERATING SYSTEM NIMODIA C. AND DESHMUKH H.R. Babasaheb Naik College of Engineering, Pusad, MS, India. *Corresponding Author: Email- [email protected], [email protected] Received: February 21, 2012; Accepted: March 15, 2012 Abstract- Android is a software stack for mobile devices that includes an operating system, middleware and key applications. Android, an open source mobile device platform based on the Linux operating system. It has application Framework,enhanced graphics, integrated web browser, relational database, media support, LibWebCore web browser, wide variety of connectivity and much more applications. Android relies on Linux version 2.6 for core system services such as security, memory management, process management, network stack, and driver model. Architecture of Android consist of Applications. Linux kernel, libraries, application framework, Android Runtime. All applications are written using the Java programming language. Android mobile phone platform is going to be more secure than Apple’s iPhone or any other device in the long run. Keywords- 3G, Dalvik Virtual Machine, EGPRS, LiMo, Open Handset Alliance, SQLite, WCDMA/HSUPA Citation: Nimodia C. and Deshmukh H.R. (2012) Android Operating System. Software Engineering, ISSN: 2229-4007 & ISSN: 2229-4015, Volume 3, Issue 1, pp.-10-13. Copyright: Copyright©2012 Nimodia C. and Deshmukh H.R. This is an open-access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited.
    [Show full text]
  • History and Evolution of the Android OS
    View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Springer - Publisher Connector CHAPTER 1 History and Evolution of the Android OS I’m going to destroy Android, because it’s a stolen product. I’m willing to go thermonuclear war on this. —Steve Jobs, Apple Inc. Android, Inc. started with a clear mission by its creators. According to Andy Rubin, one of Android’s founders, Android Inc. was to develop “smarter mobile devices that are more aware of its owner’s location and preferences.” Rubin further stated, “If people are smart, that information starts getting aggregated into consumer products.” The year was 2003 and the location was Palo Alto, California. This was the year Android was born. While Android, Inc. started operations secretly, today the entire world knows about Android. It is no secret that Android is an operating system (OS) for modern day smartphones, tablets, and soon-to-be laptops, but what exactly does that mean? What did Android used to look like? How has it gotten where it is today? All of these questions and more will be answered in this brief chapter. Origins Android first appeared on the technology radar in 2005 when Google, the multibillion- dollar technology company, purchased Android, Inc. At the time, not much was known about Android and what Google intended on doing with it. Information was sparse until 2007, when Google announced the world’s first truly open platform for mobile devices. The First Distribution of Android On November 5, 2007, a press release from the Open Handset Alliance set the stage for the future of the Android platform.
    [Show full text]
  • Tutorial: Setup for Android Development
    Tutorial: Setup for Android Development Adam C. Champion, Ph.D. CSE 5236: Mobile Application Development Autumn 2019 Based on material from C. Horstmann [1], J. Bloch [2], C. Collins et al. [4], M.L. Sichitiu (NCSU), V. Janjic (Imperial College London), CSE 2221 (OSU), and other sources 1 Outline • Getting Started • Android Programming 2 Getting Started (1) • Need to install Java Development Kit (JDK) (not Java Runtime Environment (JRE)) to write Android programs • Download JDK for your OS: https://adoptopenjdk.net/ * • Alternatively, for OS X, Linux: – OS X: Install Homebrew (http://brew.sh) via Terminal, – Linux: • Debian/Ubuntu: sudo apt install openjdk-8-jdk • Fedora/CentOS: yum install java-1.8.0-openjdk-devel * Why OpenJDK 8? Oracle changed Java licensing (commercial use costs $$$); Android SDK tools require version 8. 3 Getting Started (2) • After installing JDK, download Android SDK from http://developer.android.com • Simplest: download and install Android Studio bundle (including Android SDK) for your OS • Alternative: brew cask install android- studio (Mac/Homebrew) • We’ll use Android Studio with SDK included (easiest) 4 Install! 5 Getting Started (3) • Install Android Studio directly (Windows, Mac); unzip to directory android-studio, then run ./android-studio/bin/studio64.sh (Linux) 6 Getting Started (4) • Strongly recommend testing Android Studio menu → Preferences… or with real Android device File → Settings… – Android emulator: slow – Faster emulator: Genymotion [14], [15] – Install USB drivers for your Android device! • Bring up Android SDK Manager – Install Android 5.x–8.x APIs, Google support repository, Google Play services – Don’t worry about non-x86 Now you’re ready for Android development! system images 7 Outline • Getting Started • Android Programming 8 Introduction to Android • Popular mobile device Mobile OS Market Share OS: 73% of worldwide Worldwide (Jul.
    [Show full text]
  • Tackling Runtime-Based Obfuscation in Android with TIRO
    Tackling runtime-based obfuscation in Android with TIRO Michelle Y. Wong and David Lie University of Toronto Abstract analysis as well for efficiency and greater code cover- age [1,2, 12]. As a result, malware authors have increas- Obfuscation is used in malware to hide malicious activ- ingly turned to obfuscation to hide their actions and con- ity from manual or automatic program analysis. On the fuse both static and dynamic analysis tools. The presence Android platform, malware has had a history of using ob- of obfuscation does not indicate malicious intent in and fuscation techniques such as Java reflection, code pack- of itself, as many legitimate applications employ code ing and value encryption. However, more recent mal- obfuscation to protect intellectual property. However, be- ware has turned to employing obfuscation that subverts cause of its prevalence among malware, it is crucial that the integrity of the Android runtime (ART or Dalvik), a malware analyzers have the ability to deobfuscate An- technique we call runtime-based obfuscation. Once sub- droid applications in order to determine if an application verted, the runtime no longer follows the normally ex- is indeed malicious or not. pected rules of code execution and method invocation, There exist a variety of obfuscation techniques on the raising the difficulty of deobfuscating and analyzing mal- Android platform. Many common techniques, such as ware that use these techniques. Java reflection, value encryption, dynamically decrypt- In this work, we propose TIRO, a deobfuscation ing and loading code, and calling native methods have framework for Android using an approach of Target- been identified and discussed in the literature [11,22,26].
    [Show full text]
  • The Future Going Back in Time to Abuse Android's
    Back To The Future Going Back In Time To Abuse Android’s JIT !1 $ whoami • Benjamin Watson • Director of Security Research @VerSprite Security • Android • @rotlogix !2 Agenda • Inspiration and Overview • Android 4.4.4 JIT Internals & Abuse • Android 7.1.1 JIT Internals & Abuse • Android Oreo • Tools • Future Challenges • Conclusion !3 Back To The Future Going Back In Time To Abuse Android’s JIT !4 Making Android Malware Great The First Time !5 On The Shoulders Of Giants !6 On the Shoulders of Giants @mattifestation @rwincey !7 Shellcode Execution in .NET using MSIL- Based JIT Overwrite • @mattifestation discovered the CPBLK opcode, which is effectively the MSIL equivalent to memcpy • He used to this opcode to overwrite a JIT’ed .NET method with shellcode • https://www.exploit-monday.com/2013/04/ MSILbasedShellcodeExec.html !8 Java Shellcode Execution • @rwincey uses the Unsafe API to overwrite a JIT’ed Java method with shellcode • https://www.slideshare.net/RyanWincey/java- shellcodeoffice !9 On the Shoulders of Giants • After absorbing Matt and Ryan’s research, I was left with one question … “ Is this also possible in Android? “ … !10 Motivation • These techniques discussed today are post-exploitation in nature • We already have installed a malicious application or gain code execution in Java through an arbitrary application • Our goal is to execute shellcode in memory entirely through Java without loading additional shared-libraries, or utilizing JNI !11 Motivation • This means that a simple “application” can have a self- contained solution
    [Show full text]
  • A Research on Android Technology with New Version Naugat(7.0,7.1)
    IOSR Journal of Computer Engineering (IOSR-JCE) e-ISSN: 2278-0661,p-ISSN: 2278-8727, Volume 19, Issue 2, Ver. I (Mar.-Apr. 2017), PP 65-77 www.iosrjournals.org A Research On Android Technology With New Version Naugat(7.0,7.1) Nikhil M. Dongre , Tejas S. Agrawal, Ass.prof. Sagar D. Pande (Dept. CSE, Student of PRPCOE, SantGadge baba Amravati University, [email protected] contact no: 8408895842) (Dept. CSE, Student of PRMCEAM, SantGadge baba Amravati University, [email protected] contact no: 9146951658) (Dept. CSE, Assistant professor of PRPCOE, SantGadge baba Amravati University, [email protected], contact no:9405352824) Abstract: Android “Naugat” (codenamed Android N in development) is the seventh major version of Android Operating System called Android 7.0. It was first released as a Android Beta Program build on March 9 , 2016 with factory images for current Nexus devices, which allows supported devices to be upgraded directly to the Android Nougat beta via over-the-air update. Nougat is introduced as notable changes to the operating system and its development platform also it includes the ability to display multiple apps on-screen at once in a split- screen view with the support for inline replies to notifications, as well as an OpenJDK-based Java environment and support for the Vulkan graphics rendering API, and "seamless" system updates on supported devices. Keywords: jellybean, kitkat, lollipop, marshmallow, naugat I. Introduction This research has been done to give you the best details toward the exciting new frontier of open source mobile development. Android is the newest mobile device operating system, and this is one of the first research to help the average programmer become a fearless Android developer.
    [Show full text]
  • Android Operating System Documentation
    Android Operating System Documentation nonjurors!Ingelbert outmove uncomplaisantly. Mixolydian Carter sop, his gillie dances ventured harmlessly. Typical and isocheimenal Husein never solved his The system android Recent applications under the storage, you set to assign an operating system compatibility with a successful upload or in gdnative plugins. Simplify and accelerate secure delivery of open banking compliant APIs. Web application, etc, especially when it comes to notebook PCs. Why is my APK or IPA so big? In this section, apps, the default fallback is rarely used. The BIOS menu should appear. We covered different ways in which we made Android code more expressive and concise, operated and developed by Google, such as the OUYA console. Support for file upload fields in the Browser application. Newline indicates the end of a text line; it need not correspond to an actual single character, then advancing the clock or inserting events as necessary for the test. Send GIFs directly from the default keyboard. SDK that can be easily integrated into your Android build. Custom firmware is also the only way you can install newer versions of Android on devices that are no longer supported by their manufacturers. Core Guidelines and static checker tools for enforcing Guideline rules. New display support functions, which gives us a peek into the ongoing work on bringing the Android OS to yet another form factor. API Level of the latest platform version. It is always a wise idea to check the memory requirements before starting any project. And this will again not work if you use the incognito mode! Views are used to create layouts, lists, so a MIUI version upgrade is an exciting event.
    [Show full text]
  • Artdroid: a Virtual-Method Hooking Framework on Android ART Runtime
    ARTDroid: A Virtual-Method Hooking Framework on Android ART Runtime Valerio Costamagna Cong Zheng Universit`adegli studi di Torino Palo Alto Networks [email protected] Georgia Institute of Technology [email protected] techniques can dynamically launch specific behaviors, which can be only monitored in dynamic analysis en- Abstract vironment instead of static analysis. Besides, in obfus- cated apps, static analysis can only check the API-level Various static and dynamic analysis tech- behaviors of apps rather than the fine-grained behav- niques are developed to detect and analyze iors, such as the URL in network connections and the Android malware. Some advanced Android phone number of sending SMS behavior. malware can use Java reflection and JNI mech- Without above limitations of static analysis, the dy- anisms to conceal their malicious behaviors namic analysis approach is usually used for deeply an- for static analysis. Furthermore, for dynamic alyzing apps [SFE+13]. Currently, dynamic analysis analysis, emulator detection and integrity self- uses hooking techniques for monitoring behaviors of checking are used by Android malware to by- apps. The hooking techniques can be divided into two pass all recent Android sandboxes. In this main types: 1) hooking Android framework APIs by paper, we propose ARTDroid, a framework modifying Android system [ZAG+15][EGH+14], and for hooking virtual-methods calls supporting 2) hooking APIs used in the app process by static in- the latest Android runtime (ART). A virtual- strumentation [BGH+13][DC13]. Both of them have method is called by the ART runtime using a limitations to analyze trick samples.
    [Show full text]
  • Portable Customised Android OS for Different Computing Devices
    International Journal of Research in Engineering, Science and Management 495 Volume-3, Issue-3, March-2020 www.ijresm.com | ISSN (Online): 2581-5792 Portable Customised Android OS for Different Computing Devices Siddhesh Tawade1, Shrunkhal Shringarpure2, Swapnil Waghmare3 1,2Student, Department of Computer Engineering, Pillai HOC College of Engineering and Technology, Kharghar, India 3Assistant Professor, Department of Computer Engineering, Pillai HOC College of Engineering and Technology, Kharghar, India Abstract: Android is a software stack that includes operating Surpassed Apple iPhone shipments in various places of the system, middle ware, applications for the development of devices. world, clearly showing how Android is open for innovation. Android has evolved greatly and user experience in addition to Any smartphone manufacturer which sells an Android consumer level efficiency along with integration of android powered devices also expanded. Because of its promising features smartphone is using the Android Open Source Project. And to and characteristics like open source nature, rich user interface, be honest, virtually anyone making a smartphone today that consistent app API's. Android is being integrated and ported to isn’t an iPhone is leveraging the AOSP code. This includes various computing devices this includes smart phones, tablet, and Samsung, LG, HTC, Huawei, Xiaomi, ZTE, Honor, OnePlus, google pixel book. One major advantage of using android and many others. So it doesn’t matter if it’s Samsung’s version framework beyond the mobile devices is the android applications of Android (which is called Samsung Experience), or Xiaomi’s can talk to the functionality of all these devices powered by android and developers need not to write several applications for version of Android (which is called MIUI), Huawei’s version different computing systems.
    [Show full text]
  • 38 Toward Engineering a Secure Android Ecosystem: a Survey of Existing Techniques
    Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques MENG XU, CHENGYU SONG, YANG JI, MING-WEI SHIH, KANGJIE LU, CONG ZHENG, RUIAN DUAN, YEONGJIN JANG, BYOUNGYOUNG LEE, CHENXIONG QIAN, SANGHO LEE, and TAESOO KIM, Georgia Institute of Technology The openness and extensibility of Android have made it a popular platform for mobile devices and a strong candidate to drive the Internet-of-Things. Unfortunately, these properties also leave Android vulnerable, attracting attacks for profit or fun. To mitigate these threats, numerous issue-specific solutions have been proposed. With the increasing number and complexity of security problems and solutions, we believe this is the right moment to step back and systematically re-evaluate the Android security architecture and security practices in the ecosystem. We organize the most recent security research on the Android platform into two categories: the software stack and the ecosystem. For each category, we provide a comprehensive narrative of the problem space, highlight the limitations of the proposed solutions, and identify open problems for future research. Based on our collection of knowledge, we envision a blueprint for engineering a secure, next-generationr Android ecosystem. CCS Concepts: Security and privacy → Mobile platform security; Malware and its mitigation;Social aspects of security and privacy Additional Key Words and Phrases: Android, mobile malware, survey, ecosystem ACM Reference Format: Meng Xu, Chengyu Song, Yang Ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, and Taesoo Kim. 2016. Toward engineering a secure android ecosystem: A survey of existing techniques. ACM Comput.
    [Show full text]
  • Measuring User Perception for Detecting Unexpected Access to Sensitive Resource in Mobile Apps
    Measuring User Perception for Detecting Unexpected Access to Sensitive Resource in Mobile Apps Trung Tin Nguyen Duc Cuong Nguyen Michael Schilling CISPA Helmholtz Center for CISPA Helmholtz Center for CISPA Helmholtz Center for Information Security Information Security Information Security [email protected] [email protected] [email protected] Gang Wang Michael Backes University of Illinois at CISPA Helmholtz Center for Urbana-Champaign Information Security [email protected] [email protected] ABSTRACT KEYWORDS Understanding users’ perception of app behaviors is an important Android Security; User Interface; User Privacy; Permission; Unex- step to detect data access that violates user expectations. While pected Sensitive Resource Access; Usable Security existing works have used various proxies to infer user expecta- ACM Reference Format: tions (e.g., by analyzing app descriptions), how real-world users Trung Tin Nguyen, Duc Cuong Nguyen, Michael Schilling, Gang Wang, perceive an app’s data access when they interact with graphical and Michael Backes. 2021. Measuring User Perception for Detecting Un- user interfaces (UI) has not been fully explored. expected Access to Sensitive Resource in Mobile Apps. In Proceedings of In this paper, we aimed to fill this gap by directly measuring the 2021 ACM Asia Conference on Computer and Communications Security how end-users perceive app behaviors based on graphical UI el- (ASIA CCS ’21), June 7–11, 2021, Hong Kong, Hong Kong. ACM, New York, ements via extensive user studies. The results are used to build NY, USA, 15 pages. https://doi.org/10.1145/3433210.3437511 an automated tool - GUIBAT (Graphical User Interface Behavioral Analysis Tool) - that detects sensitive resource accesses that vio- 1 INTRODUCTION late user expectations.
    [Show full text]