Discovering Flaws in Security-Focused Static Analysis Tools for Android using Systematic Mutation
summary
A mutation-based framework called μSE generates Android app mutants using security-focused operators and placement schemes, runs three prominent data-leak detectors against seven apps, and manually inspects the undetected cases. The pipeline produces 7,584 mutants and, after an execution filter, is reduced to 2,026 mutants. Analysis finds 13 undocumented flaws in FlowDroid, shows those flaws propagate to tools that reuse FlowDroid, and results in one real fix with upstream developers.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:22MOTIVATION
- 1:00SECURITY ANALYSIS OF APPLICATIONS
- 3:03SOUNDINESS OF MOBILE SECURITY TOOLS
- 4:23USE MUTATION-BASED SOUNDNESS EVALUATION
- 5:08MUTATION ANALYSIS BACKGROUND
- 8:25USE DESIGN: MUTATION SCHEME
- 11:01IMPLEMENTATION
- 12:42EVALUATION TESTING DATA LEAK DETECTORS
- 15:21RECALL: EXPANDING THE SOUND CORE
- 16:47CONCLUDING REMARKS
- 18:58EVALUATION: FLAW PROPAGATION
related talks
30mDoes your Android app expose you to excess risk?
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
54mAnalyzing the Security of Mobile Apps for Automobiles
29mSecuring Android Applications - The not so se…
29mFixing Mobile AppSec
33mBest Practices for Mobile App Security Testing
17mStatic Detection and Automatic Exploitation of Intent Message Vulnerabilities in Android
20mMobile Application Security (MAS)