Android applications are getting bigger with an increasing number of features. However, not all the features are needed by a specific user. The unnecessary features can increase the attack surface and cost additional resources (e.g., storage and memory). Therefore, it is important to remove unnecessary features from Android applications. However, it is difficult for the end users to fully explore the apps to identify the unnecessary features, and there is no off-the-shelf tool available to assist users to debloat the apps by themselves. In this work, we propose AutoDebloater to debloat Android applications automatically for end users. AutoDebloater is a web application that can be accessed by end-users through a web browser. In particular, AutoDebloater can automatically explore an app and identify the transitions between activities. Then, AutoDebloater will present the Activity Transition Graph to users and ask them to select the activities they do not want to keep. Finally, AutoDebloater will remove the activities that are selected by users from the app. We conducted a user study on five Android apps downloaded from three categories (i.e., Finance, Tools, and Navigation) in Google Play and F-Droid. The results show that users are satisfied with AutoDebloater in terms of the stability of the debloated apps and the ability of AutoDebloater to identify features that are never noticed before. The tool is available at http://autodebloater.club. The code is available at https://github.com/jiakun-liu/autodebloater/ and the demonstration video can be found at https://youtu.be/Gmz0-p2n9D4
Thu 14 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
13:30 - 15:00 | Mobile Development 2Research Papers / Industry Showcase (Papers) / Journal-first Papers / Tool Demonstrations at Room D Chair(s): Jordan Samhi CISPA Helmholtz Center for Information Security | ||
13:30 12mTalk | Enhancing Mobile App Bug Reporting via Real-Time Understanding of Reproduction Steps Journal-first Papers Mattia Fazzini University of Minnesota, Kevin Moran George Mason University, Carlos Bernal-Cárdenas Microsoft, Tyler Wendland University of Minnesota, Alessandro Orso Georgia Institute of Technology, Denys Poshyvanyk William & Mary | ||
13:42 12mTalk | AutoDebloater: Automated Android App Debloating Tool Demonstrations Jiakun Liu Singapore Management University, Xing Hu Zhejiang University, Ferdian Thung Singapore Management University, Shahar Maoz Tel Aviv University, Eran Toch Tel Aviv University, Debin Gao Singapore Management University, David Lo Singapore Management University | ||
13:54 12mTalk | ReuNify: A Step Towards Whole Program Analysis for React Native Android App Research Papers Yonghui Liu Monash University, Xiao Chen Monash University, Pei Liu Data61 at CSIRO, Australia, John Grundy Monash University, Chunyang Chen Monash University, Li Li Beihang University Pre-print | ||
14:06 12mTalk | WeMinT: Tainting Sensitive Data Leaks in WeChat Mini-Programs Research Papers Shi Meng Beijing University of Posts and Telecommunications, Liu Wang Beijing University of Posts and Telecommunications, Shenao Wang Xidian University, Kailong Wang Huazhong University of Science and Technology, Xusheng Xiao Arizona State University, Guangdong Bai University of Queensland, Haoyu Wang Huazhong University of Science and Technology | ||
14:18 12mTalk | Vision-based Widget Mapping for Test Migration across Mobile Platforms: Are We There Yet? Research Papers Ruihua Ji Nanjing University, Tingwei Zhu Nanjing University, Xiaoqing Zhu Nanjing University, Chunyang Chen Monash University, Minxue Pan Nanjing University, Tian Zhang Nanjing University | ||
14:30 12mTalk | Government Mobile Apps: Analysing Citizen Feedback via App Reviews Industry Showcase (Papers) Tooba Aamir Data61 at CSIRO, Australia, Mohan Baruwal Chhetri CSIRO’s Data61, M.A.P. Chamikara Data61 CSIRO Australia, Marthie Grobler CSIRO's Data61 | ||