Reference : Detecting privacy leaks in Android Apps

	Document type :	Scientific congresses, symposiums and conference proceedings : Unpublished conference
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/16916

Title :	Detecting privacy leaks in Android Apps
Language :	English
Author, co-author :	Li, Li [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Bartel, Alexandre [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Klein, Jacques [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
	Le Traon, Yves [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	26-Feb-2014
Number of pages :	6
Peer reviewed :	Yes
On invitation :	No
Audience :	International
Event name :	International Symposium on Engineering Secure Software and Systems - Doctoral Symposium
Event date :	from 26-02-2014 to 28-02-2014
Keywords :	[en] Static Analysis ; Taint Analysis ; Privacy Leaks ; ICC ; CFG
Abstract :	[en] The number of Android apps have grown explosively in recent years and the number of apps leaking private data have also grown. It is necessary to make sure all the apps are not leaking private data before putting them to the app markets and thereby a privacy leaks detection tool is needed. We propose a static taint analysis approach which leverages the control-flow graph (CFG) of apps to detect privacy leaks among Android apps. We tackle three problems related to inter- component communication (ICC), lifecycle of components and callback mechanism making the CFG imprecision. To bridge this gap, we ex- plicitly connect the discontinuities of the CFG to provide a precise CFG. Based on the precise CFG, we aim at providing a taint analysis approach to detect intra-component privacy leaks, inter-component privacy leaks and also inter-app privacy leaks.
Research centres :	SnT
Funders :	Fonds National de la Recherche - FnR
Target :	Researchers ; Professionals ; Students ; General public ; Others
Permalink :	http://hdl.handle.net/10993/16916

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access ESSoS-DS2014-Li.pdf Author preprint 247.16 kB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map