Ariadne: Navigating through the Labyrinth of Data-Driven Customization...

on YouTube ↗23m

" summary

Ariadne performs static analysis on decompiled ROMs to build an AC dependency graph that models framework data holders and their relations, propagates access-control annotations using quantified reduction factors, and flags APIs whose enforced permissions are weaker than inferred ones. Applied to AOSP plus 11 custom ROMs across Android 8–14, it finds 90 unique inconsistencies, implements 13 proof-of-concept exploits, and identifies 30 unique data-driven AC inconsistencies missed by prior tools while reporting ~97% precision on AOSP.

AI-written summary · about

" chapters (8)

1. 0:00Ariadne introduction
2. 2:43Understanding access control inconsistencies in APIs
3. 7:20Access control inference challenges
4. 10:13Ariadne’s static analysis
5. 13:50Taint tracking and graphs
6. 17:45Propagating access controls
7. 20:14Inconsistencies and results
8. 22:45Conclusion

" related talks

• 25mHarvesting Inconsistent Security Configurations in Custom Android ROMs...Xiao Zhang, Yousra Aafer, Wenliang Du · USENIX Security '16
• 27mOn Demystifying the Android Application Framework: Re-Visiting Android...Michael Backes, Sven Bugiel, Erik Derr, Patrick McDaniel, Damien Octeau, Sebastian Weisgerber · USENIX Security '16
• 24mDangerous Hare: Hanging Attribute References Hazards Due to Vendor CustomizationNan Zhang · Black Hat USA 2016
• 53mAndroid: He protec, but he also attacAleksandr Guzenko · Mobius 2018 Moscow
• 21mDiscovering Flaws in Security-Focused Static Analysis Tools for Android using Systematic MutationRichard Bonett · USENIX Security '18
• 38mThe State of Mockodile in 2018Matteo Doni · Droidcon Dubai 2018
• 40mAOSP customizationEffie Barak · droidcon London 2022
• 36mRevisiting Stealthy Sensitive Information Collection from Android AppsGuangdong Bai, Guangshuai Xia, Qing Zhang · Black Hat Asia 2023