Download

Full Text

• Kevin Allix, Tegawendé F. Bissyandé, Jacques Klein, and Yves Le Traon. 2016. AndroZoo: Collecting Millions of Android Apps for the Research Community. In Proceedings of the 13th International Conference on Mining Software Repositories (Austin, Texas) (MSR’16). ACM, New York, NY, USA, 468-471. https://doi.org/10.1145/2901739.2903508
• Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick McDaniel. 2014. FlowDroid: Precise Context, Flow, Field, Object-Sensitive and Lifecycle-Aware Taint Analysis for Android Apps. ACM SIGPLAN NOTICES 49, 6 (June 2014), 259-269. https://doi.org/10.1145/2666356.2594299
• Eric Bodden, Andreas Sewe, Jan Sinschek, Hela Oueslati, and Mira Mezini. 2011. Taming Reflection: Aiding Static Analysis in the Presence of Reflection and Custom Class Loaders. In Proceedings of the 33rd International Conference on Software Engineering (Waikiki, Honolulu, HI, USA) (ICSE’11). Association for Computing Machinery, New York, NY, USA, 241-250. https://doi.org/10.1145/1985793.1985827
• Dewan Chaulagain, Prabesh Poudel, Prabesh Pathak, Sankardas Roy, Doina Caragea, Guojun Liu, and Xinming Ou. 2020. Hybrid Analysis of Android Apps for Security Vetting using Deep Learning. In 2020 IEEE Conference on Communications and Network Security (CNS). 1-9. https://doi.org/10.1109/CNS48642.2020.9162341
• Zhichao Cheng, Fanping Zeng, Xingqiu Zhong, Mingsong Zhou, Chengcheng Lv, and Shuli Guo. 2017. Resolving reflection methods in Android applications. In 2017 IEEE International Conference on Intelligence and Security Informatics (ISI). 143-145. https://doi.org/10.1109/ISI.2017.8004892
• Jeffrey Dean, David Grove, and Craig Chambers. 1995. Optimization of Object-Oriented Programs Using Static Class Hierarchy Analysis. In ECOOP’95 - Object-Oriented Programming, 9th European Conference, Åarhus, Denmark, August 7-11, 1995, Mario Tokoro and Remo Pareschi (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 77-101.
• Michael D. Ernst. [n. d.]. Static and dynamic analysis: Synergy and duality. 24-27.
• Jyoti Gajrani, Umang Agarwal, Vijay Laxmi, Bruhadeshwar Bezawada, Manoj Singh Gaur, Meenakshi Tripathi, and Akka Zemmari. 2020. EspyDroid+: Precise reflection analysis of android apps. Computers & Security 90 (2020), 101688. https://doi.org/10.1016/j.cose.2019.101688
• Google. 2023. Android Monkey, https://developer.android.com/studio/test/ monkey. Accessed July 2023.
• Michael I Gordon, Deokhwan Kim, Jeff H Perkins, Limei Gilham, Nguyen Nguyen, and Martin C Rinard. 2015. Information flow analysis of android applications in droidsafe.. In NDSS, Vol. 15. 110.
• Dominik Helm, Sven Keidel, Anemone Kampkötter, Johannes Düsing, Tobias Roth, Ben Hermann, and Mira Mezini. 2024. Total Recall? How Good Are Static Call Graphs Really? (ISSTA 2024). Association for Computing Machinery, New York, NY, USA, 112-123. https://doi.org/10.1145/3650212.3652114
• Ondřej Lhoták and Laurie Hendren. 2003. Scaling Java Points-to Analysis Using SPARK. In Proceedings of the 12th International Conference on Compiler Construction (Warsaw, Poland) (CC’03). Springer-Verlag, Berlin, Heidelberg, 153-169.
• Li Li, Alexandre Bartel, Tegawendé F. Bissyandé, Jacques Klein, Yves Le Traon, Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, and Patrick McDaniel. 2015. IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. In Proceedings of the 37th International Conference on Software Engineering - Volume 1 (Florence, Italy) (ICSE’15). IEEE Press, 280-291.
• Li Li, Tegawendé F. Bissyandé, Damien Octeau, and Jacques Klein. 2016. DroidRA: Taming Reflection to Support Whole-Program Analysis of Android Apps. In Proceedings of the 25th International Symposium on Software Testing and Analysis (Saarbrücken, Germany) (ISSTA 2016). Association for Computing Machinery, New York, NY, USA, 318-329. https://doi.org/10.1145/2931037.2931044
• Li Li, Tegawendé F. Bissyandé, Damien Octeau, and Jacques Klein. 2016. Reflection-aware static analysis of Android apps. In Proceedings of the 31st IEEE/ACM International Conference on Automated Software Engineering (Singapore, Singapore) (ASE’16). Association for Computing Machinery, New York, NY, USA, 756-761. https://doi.org/10.1145/2970276.2970277
• Martina Lindorfer, Matthias Neugschwandtner, Lukas Weichselbaum, Yanick Fratantonio, Victor van der Veen, and Christian Platzer. 2014. ANDRUBIS - 1,000,000 Apps Later: A View on Current Android Malware Behaviors. In 2014 Third International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS). 3-17. https://doi.org/10.1109/BADGERS. 2014.7
• Marc Miltenberger and Steven Arzt. 2023. Extensible and Scalable Architecture for Hybrid Analysis. In Proceedings of the 12th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis (Orlando, FL, USA) (SOAP 2023). Association for Computing Machinery, New York, NY, USA, 34-39. https://doi.org/10.1145/3589250.3596146
• Shawn Rasheed and Jens Dietrich. 2021. A hybrid analysis to detect Java serialisation vulnerabilities. In Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering (Virtual Event, Australia) (ASE’20). Association for Computing Machinery, New York, NY, USA, 1209-1213. https://doi.org/10.1145/3324884.3418931
• J. Samhi, A. Bartel, T. F. Bissyande, and J. Klein. 2021. RAICC: Revealing Atypical Inter-Component Communication in Android Apps. In 2021 IEEE/ACM 43rd International Conference on Software Engineering (ICSE). IEEE Computer Society, Los Alamitos, CA, USA, 1398-1409. https://doi.org/10.1109/ICSE43902.2021.00126
• Jordan Samhi, Jun Gao, Nadia Daoudi, Pierre Graux, Henri Hoyez, Xiaoyu Sun, Kevin Allix, Tegawendé F Bissyandé, and Jacques Klein. 2022. JuCify: A Step Towards Android Code Unification for Enhanced Static Analysis. In 2022 IEEE/ACM 44th International Conference on Software Engineering (ICSE). IEEE Computer Society, Los Alamitos, CA, USA, 1232-1244. https://doi.org/10.1145/3510003.3512766
• Jordan Samhi, René Just, Tegawendé F. Bissyandé, Michael D. Ernst, and Jacques Klein. 2024. Call Graph Soundness in Android Static Analysis. In Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (Vienna, Austria) (ISSTA 2024). Association for Computing Machinery, New York, NY, USA, 945-957. https://doi.org/10.1145/3650212.3680333
• Xiaoyu Sun, Li Li, Tegawendé F. Bissyandé, Jacques Klein, Damien Octeau, and John Grundy. 2021. Taming Reflection: An Essential Step Toward Whole-program Analysis of Android Apps. ACM Trans. Softw. Eng. Methodol. 30, 3 (2021), 36. https://doi.org/10.1145/3440033
• Raja Vallée-Rai, Phong Co, Etienne Gagnon, Laurie Hendren, Patrick Lam, and Vijay Sundaresan. 1999. Soot - a Java Bytecode Optimization Framework. In Proceedings of the 1999 Conference of the Centre for Advanced Studies on Collaborative Research (Mississauga, Ontario, Canada) (CASCON’99). IBM Press, 13.
• VMWare. 2024. Java Spring Framework, https://spring.io. Accessed October 2024.
• Wenyu Wang, Wing Lam, and Tao Xie. 2021. An Infrastructure Approach to Improving Effectiveness of Android UI Testing Tools. In Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis (Virtual, Denmark) (ISSTA 2021). Association for Computing Machinery, New York, NY, USA, 165-176. https://doi.org/10.1145/3460319.3464828
• Wenyu Wang, Dengfeng Li, Wei Yang, Yurui Cao, Zhenwen Zhang, Yuetang Deng, and Tao Xie. 2018. An Empirical Study of Android Test Generation Tools in Industrial Cases. In 2018 33rd IEEE/ACM International Conference on Automated Software Engineering (ASE). 738-748. https://doi.org/10.1145/3238147.3240465
• Xiaolei Wang, Yuexiang Yang, and Sencun Zhu. 2019. Automated Hybrid Analysis of Android Malware through Augmenting Fuzzing with Forced Execution. IEEE Transactions on Mobile Computing 18, 12 (2019), 2768-2782. https://doi.org/10.1109/TMC.2018.2886881
• Fengguo Wei, Xingwei Lin, Xinming Ou, Ting Chen, and Xiaosong Zhang. 2018. JN-SAF: Precise and Efficient NDK/JNI-Aware Inter-Language Static Analysis Framework for Security Vetting of Android Applications with Native Code. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (Toronto, Canada) (CCS’18). Association for Computing Machinery, New York, NY, USA, 1137-1150. https://doi.org/10.1145/3243734.3243835
• Fengguo Wei, Sankardas Roy, Xinming Ou, and Robby. 2014. Amandroid: A Precise and General Inter-Component Data Flow Analysis Framework for Security Vetting of Android Apps. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security (Scottsdale, Arizona, USA) (CCS’14). Association for Computing Machinery, New York, NY, USA, 1329-1341. https://doi.org/10.1145/2660267.2660357