MtdScout : Complementing the identification of insecure methods in Android apps via source-to-bytecode signature generation and tree-based layered search

• Main Authors: ZHANG, Zicheng, MA, Haoyu, WU, Daoyuan, GAO, Debin, YI, Xiao, CHEN, Yufan, WU, Yan, JIANG, Lingxiao
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2024
• Subjects: Clone detection; Android apps; Third-party library detection; TPL detection; Open-source security; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/9688; https://ink.library.smu.edu.sg/context/sis_research/article/10688/viewcontent/eurosp24__1_.pdf
• Institution: Singapore Management University

Modern Android apps consist of both host app code and third-party libraries. Traditional static analysis tools conduct taint analysis for API misuses on the entire app code, while third-party library (TPL) detection tools focus solely on library code. Both approaches, however, are prone to some inhe...