Critical review of static taint analysis of android applications for detecting information leakages

2017 ◽  
Author(s):  
Haris Mumtaz ◽  
El-Sayed M. El-Alfy
Keyword(s):  
Critical Review ◽  
Taint Analysis ◽  
Android Applications

scholarly journals TaintBench: Automatic real-world malware benchmarking of Android taint analyses

2021 ◽  
Vol 27 (1) ◽  
Author(s):  
Linghui Luo ◽  
Felix Pauck ◽  
Goran Piskachev ◽  
Manuel Benz ◽  
Ivan Pashchenko ◽  
...  
Keyword(s):  
Real World ◽  
Ground Truth ◽  
Complex Structures ◽  
Taint Analysis ◽  
Specific Domain ◽  
Sources And Sinks ◽  
Usability Test ◽  
Android Applications ◽  
Benchmark Suite ◽  
Perceived Usability

AbstractDue to the lack of established real-world benchmark suites for static taint analyses of Android applications, evaluations of these analyses are often restricted and hard to compare. Even in evaluations that do use real-world apps, details about the ground truth in those apps are rarely documented, which makes it difficult to compare and reproduce the results. To push Android taint analysis research forward, this paper thus recommends criteria for constructing real-world benchmark suites for this specific domain, and presents TaintBench, the first real-world malware benchmark suite with documented taint flows. TaintBench benchmark apps include taint flows with complex structures, and addresses static challenges that are commonly agreed on by the community. Together with the TaintBench suite, we introduce the TaintBench framework, whose goal is to simplify real-world benchmarking of Android taint analyses. First, a usability test shows that the framework improves experts’ performance and perceived usability when documenting and inspecting taint flows. Second, experiments using TaintBench reveal new insights for the taint analysis tools Amandroid and FlowDroid: (i) They are less effective on real-world malware apps than on synthetic benchmark apps. (ii) Predefined lists of sources and sinks heavily impact the tools’ accuracy. (iii) Surprisingly, up-to-date versions of both tools are less accurate than their predecessors.

A scalable, flow-and-context-sensitive taint analysis of android applications

2019 ◽  
Vol 51 ◽  
pp. 1-14 ◽  
Author(s):  
Wontae Choi ◽  
Jayanthkumar Kannan ◽  
Domagoj Babic
Keyword(s):  
Taint Analysis ◽  
Context Sensitive ◽  
Android Applications

Semi-synthesis as a tool for broadening the health applications of bioactive olive secoiridoids: a critical review

2021 ◽  
Author(s):  
Manuela Oliverio ◽  
Monica Nardi ◽  
Maria Luisa Di Gioia ◽  
Paola Costanzo ◽  
Sonia Bonacci ◽  
...  
Keyword(s):  
Critical Review ◽  
Natural Compounds ◽  
Effective Strategy ◽  
Synthetic Analogues ◽  
Health Applications ◽  
Natural And Synthetic

Semi-synthesis is an effective strategy to obtain both natural and synthetic analogues of the olive secoiridoids, starting from easy accessible natural compounds.

Sign in / Sign up

Export Citation Format

Share Document