PermDroid: Automatically Testing Permission-Related Behaviour of Android Applications
Fri 22 Jul 2022 18:20 - 18:40 at ISSTA 2 - Session 3-14: Android D
The Android runtime permission model allows users to grant and revoke permissions at runtime. To verify the robustness of apps, developers have to test the apps repeatedly under a wide range of permission combinations, which is time-consuming and unsuited for regression testing. Existing app testing techniques are of limited help in this context, as they seldom consider different permission combinations explicitly. To address this issue, we present \textsf{PermDroid} to automatically test the permission-related behaviour of apps with permissions granted/revoked dynamically. \textsf{PermDroid} first statically constructs a state transition graph (STG) for the app; it then utilizes the STG for the permission-directed exploration to test permission-related behaviour only under the combinations of the relevant permissions. The experimental results on 50 real-world Android apps demonstrate the effectiveness and efficiency of \textsf{PermDroid}: the average permission-related API invocation coverage achieves 72.38% in 10 minutes, and seven permission-related bugs are uncovered, six of which are not detected by the competitors.
Wed 20 JulDisplayed time zone: Seoul change
10:00 - 11:00 | Session 2-5: Android BTechnical Papers at ISSTA 1 Chair(s): Christoph Csallner University of Texas at Arlington | ||
10:00 20mTalk | Automatically Detecting API-induced Compatibility Issues in Android Apps: A Comparative Analysis (Replicability Study) Technical Papers Pei Liu Monash University, Yanjie Zhao Monash University, Haipeng Cai Washington State University, USA, Mattia Fazzini University of Minnesota, John Grundy Monash University, Li Li Monash University DOI | ||
10:20 20mTalk | PermDroid: Automatically Testing Permission-Related Behaviour of Android Applications Technical Papers Shuaihao Yang Nanjing University of Science and Technology, Zigang Zeng Nanjing University of Science and Technology, Wei Song Nanjing University of Science and Technology DOI | ||
10:40 20mTalk | Detecting and Fixing Data Loss Issues in Android Apps Technical Papers Wunan Guo Fudan University, Zhen Dong Fudan University, China, Liwei Shen Fudan University, Wei Tian Fudan University, Ting Su East China Normal University, Xin Peng Fudan University DOI | ||
Fri 22 JulDisplayed time zone: Seoul change
18:00 - 18:40 | |||
18:00 20mTalk | Detecting and Fixing Data Loss Issues in Android Apps Technical Papers Wunan Guo Fudan University, Zhen Dong Fudan University, China, Liwei Shen Fudan University, Wei Tian Fudan University, Ting Su East China Normal University, Xin Peng Fudan University DOI | ||
18:20 20mTalk | PermDroid: Automatically Testing Permission-Related Behaviour of Android Applications Technical Papers Shuaihao Yang Nanjing University of Science and Technology, Zigang Zeng Nanjing University of Science and Technology, Wei Song Nanjing University of Science and Technology DOI | ||