Finding the Missing Piece: Permission Specification Analysis for Android NDK
The Android research community has long focused on building the permission specification for Android framework APIs, which can be referenced by app developers to request the necessary permissions for their apps. However, existing studies just analyze the permission specification for Java framework APIs in Android SDK, whereas the permission specification for native framework APIs in Android NDK remains intact. Since more and more apps implement their functionalities using native framework APIs, and the permission specification for these APIs is poorly documented, the permission specification analysis for Android NDK is in urgent need. To fill in the gap, in this paper, we conduct the first permission specification analysis for Android NDK. In particular, to automatically generate the permission specification for Android NDK, we design and develop PSGen, a new tool that statically analyzes the implementation of Android framework and Android kernel to correlate native framework APIs with their required permissions. Applying PSGen to 3 Android systems, including Android 9.0, 10.0, and 11.0, we find that PSGen can precisely build the permission specification. With the help of PSGen, we discover more than 200 native framework APIs that are correlated with at least one permission.
Wed 17 NovDisplayed time zone: Hobart change
19:00 - 20:00 | |||
19:00 20mTalk | Finding the Missing Piece: Permission Specification Analysis for Android NDK Research Papers Hao Zhou The Hong Kong Polytechnic University, Haoyu Wang Beijing University of Posts and Telecommunications, Shuohan Wu The Hong Kong Polytechnic University, Xiapu Luo Hong Kong Polytechnic University, Yajin Zhou Zhejiang University, Ting Chen University of Electronic Science and Technology of China, Ting Wang Pennsylvania State University | ||
19:20 20mTalk | Characterizing and Detecting Configuration Compatibility Issues in Android Apps Research Papers Huaxun Huang Hong Kong University of Science and Technology, Ming Wen Huazhong University of Science and Technology, Lili Wei Hong Kong University of Science and Technology, Yepang Liu Southern University of Science and Technology, Shing-Chi Cheung Hong Kong University of Science and Technology | ||
19:40 20mTalk | Where to Start: Studying Type Annotation Practices in Python Research Papers Wuxia Jin Xi'an Jiaotong University, Dinghong Zhong Xi'an Jiaotong University, Zifan Ding Xi'an Jiaotong University, Ming Fan Xi'an Jiaotong University, Ting Liu Xi'an Jiaotong University | ||