Scholarlink

This paper addresses vulnerabilities in Android apps introduced by developers failing to follow Google’s security guidelines. Existing tools do not cover all guidelines, leaving many violations undetected. We propose SPECK, a static rule-based taint analysis system that detects violations of all 31 Google guidelines, outperforming current tools. Analyzing 500 popular apps, we find every app has at least one violation, highlighting the need for comprehensive detection.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Poster: SPECK: From Google Textual Guidelines to Automatic Detection of Android Apps Vulnerabilities

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Roberto Rossini,
  • Simeone Pizzi,
  • Samuele Doria,
  • Mauro Conti,
  • Eleonora Losiouk

摘要

This paper addresses vulnerabilities in Android apps introduced by developers failing to follow Google’s security guidelines. Existing tools do not cover all guidelines, leaving many violations undetected. We propose SPECK, a static rule-based taint analysis system that detects violations of all 31 Google guidelines, outperforming current tools. Analyzing 500 popular apps, we find every app has at least one violation, highlighting the need for comprehensive detection.