• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE International Conference on Software Maintenance and Evolution >Understanding Android Application Programming and Security: A Dynamic Study
【24h】

Understanding Android Application Programming and Security: A Dynamic Study

机译：了解Android应用程序编程和安全性：动态研究

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Most existing research for Android focuses on particular security issues, yet there is little broad understanding of Android application run-time characteristics and their implications. To mitigate this gap, we present the first systematic dynamic characterization study of Android apps that targets a broad understanding of application behaviors in Android. Through lightweight method-level profiling, we collected 59GB traces of method calls and Intent-based inter-component communication (ICC) from 125 popular Android apps and 62 pairs among them that enabled an intensive empirical investigation of their run-time behaviors. Our study revealed that, among other findings, (1) the application executions were overwhelmingly dominated by the Android framework, (2) Activity components dominated over other types of components and were responsible for most lifecycle callbacks (3) most event handlers dealt with user interactions as opposed to system events, (4) the majority of exercised ICCs did not carry any data payloads, and (5) sensitive data sources and sinks targeted only one/two dominant categories of information or operations. We also discuss the implications of our results for cost-effective program analysis and security defense for Android.
机译：Android的大多数现有研究侧重于特定的安全问题，但对Android应用程序运行时特征几乎没有广泛理解及其含义。为了缓解这种差距，我们展示了Android应用程序的第一个系统动态特征研究，这些研究针对Android中的应用程序行为广泛了解。通过轻量级方法级别的分析，我们收集了来自125个流行的Android应用程序的方法调用和基于意图的组件间通信（ICC）的59GB痕迹和62对之间他们，他们启用了运行时的行为进行了深入的实证调查。我们的研究表明，在其他发现中，（1）申请执行是由Android框架的压倒性地主导，（2）活动组件主导了其他类型的组件，并负责大多数生命周期回调（3）大多数事件处理程序处理用户与系统事件相反的交互（4）大多数行使ICC没有携带任何数据有效载荷，并且（5）敏感数据源和沉积只针对一个/两个主要的信息或操作类别。我们还讨论了我们对Android的成本效益的计划分析和安全防御的结果的影响。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号