Reference : Empirical Comparison of Intermediate Representations for Android Applications
Scientific congresses, symposiums and conference proceedings : Paper published in a book
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/18548
Empirical Comparison of Intermediate Representations for Android Applications
English
Arnatovich, Yauhen Leanidavich mailto [Nanyang Technological University > Infinitus, Infocomm Centre of Excellence]
Tan, Hee Beng Kuan mailto [Nanyang Technological University > School of Electrical and Electronic Engineering]
Shar, Lwin Khin mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)]
3-Jul-2014
26th International Conference on Software Engineering and Knowledge Engineering
Yes
International
26th International Conference on Software Engineering and Knowledge Engineering
01-07-2014 TO 03-07-2014
Vancouver
Canada
[en] intermediate representation ; Android computing ; event-based testing
[en] In Android-based mobile computing, since the original Java source code is irretrievable from Dalvik bytecode, intermediate representations (IRs) were developed to represent Dalvik bytecode in readable form. To date, SMALI, JASMIN, and JIMPLE are all used as Android application IRs by mobile developers, testers and researchers. Here, we compare these three IRs via randomized event-based testing (Monkey testing) to determine that which most accurately preserves the original program behaviors in terms of the number of successfully injected events. As such program behaviors are critical to mobile security, the choice of IR is crucial during software security testing. In our experiment, we developed an event-based comparative scheme, and conducted a comprehensive empirical study. Statistical comparison of the three IRs’ program behaviors shows that SMALI behaves closest to the original applications and hence is the most suitable for software security testing as the most accurate alternative to the original Java source code (which is usually not publicly available).
http://hdl.handle.net/10993/18548

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Limited access
seke14paper_84.pdfAuthor preprint1.14 MBRequest a copy

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.