Androsia: A tool for securing in memory sensitive data
summary
A bytecode tool named Androsia finds precise last-use points for sensitive in-memory objects in Android apps and rewrites app code to clear them immediately. It uses summary-based interprocedural dataflow implemented on Soot’s Simple IR with FlowDroid-generated dummy mains and Dexpler, targets StringBuilder secrets, and instruments delete(0,len) or insert reset methods. Demo heap snapshots show passwords disappear; loop-aware and static/instance-field cases are handled, instance-field support is ~90% complete and the project currently outputs modified DEX/APK.
AI-written summary · about
chapters (26)
- 0:00Intro
- 1:40Agenda
- 2:18Main Takeaway
- 4:53Garbage Collector
- 7:24destroy API
- 8:14static secret
- 8:52background
- 9:35simple
- 10:03dalvik to simple
- 11:38flow droid
- 12:26dummy main method
- 13:01design overview
- 13:37stringbuilder objects
- 14:55instance fields
- 15:38demo
- 17:22static field
- 17:46method bar
- 18:39output format
- 19:00power method
- 26:36last users point
- 28:07DEF set
- 29:46Dataflow equations
- 35:21Recap
- 35:47Instance Field Approach
- 36:46Reset Methods
- 37:12Github repo
related talks
51mAndrosia: A step ahead in securing in-memory Android application data
47mAttacking Android Applications
47mSecuring Android Applications, The Right Way
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
28mSecure Development whit Android
01h 07mHow to attack (and secure) an Android app: an introduction
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
53mAndroid: He protec, but he also attac