From Idea to CVE: How to Find Vulnerabilities in Android
summary
Practical guidance for finding Android OS vulnerabilities: how to choose targets, which methodologies and tools to use, what to look for, and how to prepare a high-quality technical report. Also covers the vulnerability lifecycle from discovery to CVE assignment and Android security bulletin publication, and gives technical details of several now-fixed Android vulnerabilities.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:03Google VRP
- 9:13Vulnerability search strategies
- 17:21Quality report writing
- 20:33Android Auto Repro
- 25:27Report resolutions
- 29:00Vulnerability breakdown
- 41:28Conclusion and Q&A
related talks
41mOverview of common Android app vulnerabilities
37mHow to find vulnerabilities in a mobile app
48mMastering Android Security Research: A Guide for the Modern Security Researcher
42mHack, Patch, Repeat: Insider Tales from Android’s...
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
42mDangers on Android: Vulnerabilities and Defenses
43mSecurity in Android Applications
41mFive Years of Android Security Research: the Good, the Bad...