Automatically Exploiting Potential Component Leaks in Android Applications

Li, Li; Bartel, Alexandre; Klein, Jacques; Le Traon, Yves

Reference : Automatically Exploiting Potential Component Leaks in Android Applications


	Document type :	Reports : Internal report
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/16914

Title :	Automatically Exploiting Potential Component Leaks in Android Applications
Language :	English
Author, co-author :	Li, Li [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Bartel, Alexandre [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Klein, Jacques [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
	Le Traon, Yves [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	4-Jun-2014
Publisher :	SnT
Number of pages :	10
ISBN :	978-2-87971-133-1
Report number :	TR-SnT-2014-13
City :	Luxembourg
Country :	Luxembourg
Keywords :	[en] Data-flow analysis ; Potential Component leaks ; PCLeaks
Abstract :	[en] We present PCLeaks, a tool based on inter- component communication (ICC) vulnerabilities to perform data-flow analysis on Android applications to find potential component leaks (e.g., another component can potentially exploit the leak). To evaluate our approach, we run PCLeaks on 2000 apps, randomly selected from Google Play store. PCLeaks reports 986 potential component leaks in 185 apps. For each leak reported by PCLeaks, PCLeaksValidator automatically generates an Android app which tries to exploit the leak. By manually running a subset of the generated apps, we find that 75% of the reported leaks are exploitable leaks.
Research centres :	SnT
Funders :	Fonds National de la Recherche - FnR
Target :	Researchers ; Professionals ; Students ; General public ; Others
Permalink :	http://hdl.handle.net/10993/16914
Commentary :	Technical Report

File(s) associated to this reference

Fulltext file(s):

	File	Commentary	Version	Size	Access
Open access	tr-pcLeaks.pdf		Publisher postprint	920.44 kB	View/Open

All documents in ORBi^lu are protected by a user license.

University of Luxembourg Library | Feedback | Legal notices