Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets

  • Abstract

    This report describes recent significant enhancements to DidFail (Droid Intent Data Flow Analysis for Information Leakage), the CERT static taint analyzer for sets of Android apps. In addition to improving the analyzer itself, the enhancements include a new testing framework, new test apps, and test results. A framework for testing the DidFail analyzer, including a setup for cloud-based testing was developed and instrumented to measure performance. Cloud-based testing enables the parallel use of powerful, commercially available virtual machines to speed up testing. DidFail was also modified to use the most current version of FlowDroid and Soot, increasing its success rate from 18% to 68% on our test set of real-world apps. Analytical features were added for more types of components and shared static fields and new apps developed to test these features. The improved DidFail analyzer and the cloud-based testing framework were used to test the new apps and additional apps from the Google Play store.

  • Download

Cite This Report

SEI

Burket, Jonathan; Flynn, Lori; Klieber, Will; Lim, Jonathan; Shen, Wei; & Snavely, William. Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets. CMU/SEI-2015-TR-001. Software Engineering Institute, Carnegie Mellon University. 2015. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962

IEEE

Burket. Jonathan, Flynn. Lori, Klieber. Will, Lim. Jonathan, Shen. Wei, and Snavely. William, "Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2015-TR-001, 2015. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962

APA

Burket, Jonathan., Flynn, Lori., Klieber, Will., Lim, Jonathan., Shen, Wei., & Snavely, William. (2015). Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets (CMU/SEI-2015-TR-001). Retrieved December 09, 2016, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962

CHI

Jonathan Burket, Lori Flynn, Will Klieber, Jonathan Lim, Wei Shen, & William Snavely. Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets (CMU/SEI-2015-TR-001). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2015. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962

MLA

Burket, Jonathan., Flynn, Lori., Klieber, Will., Lim, Jonathan., Shen, Wei., & Snavely, William. 2015. Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets (Technical Report CMU/SEI-2015-TR-001). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962

BibTex

@techreport{BurketMakingDidFail2015,
title={Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets},
author={Jonathan Burket and Lori Flynn and Will Klieber and Jonathan Lim and Wei Shen and William Snavely},
year={2015},
number={CMU/SEI-2015-TR-001},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=434962} }