网络与信息安全学报 (Jun 2017)

Static-analysis-based event input generation approach for Android application

  • Yi-lin YE,Zhen-ji ZHOU,Zheng HONG,Hui-ying YAN,Li-fa WU

DOI
https://doi.org/10.11959/j.issn.2096-109x.2017.00169
Journal volume & issue
Vol. 3, no. 6
pp. 21 – 32

Abstract

Read online

A static-analysis-based event input generation approach for Android applications was proposed.Based on the inter-component call graph and the system dependence graph of single component,the event inputs that security-related callbacks depend on were extracted.Furthermore,an event input algorithm was designed to automatically generate event inputs according to Android application runtime.The experimental results show that the proposed method can achieve higher coverage of permission methods and basic components,which can cover more security-related execution paths and help to collect more security-related runtime behaviors during the process of dynamic analysis.

Keywords