Automated Third-Party Library Detection for Android Applications: Are We There Yet?
Abstract
Third-party libraries (TPLs) have become a significant part of the Android ecosystem. Developers can employ various TPLs with different functionalities to facilitate their app development. Unfortunately, the popularity of TPLs also brings new challenges and even threats. TPLs may carry malicious or vulnerable code, which can infect popular apps to pose threats to mobile users. Besides, the code of third-party libraries could constitute noises in some downstream tasks (e.g., malware and repackaged app detection). Thus, researchers have developed various tools to identify TPLs. However, no existing work has studied these TPL detection tools in detail; different tools focus on different applications with performance differences, but little is known about them.
BibTeX
@inproceedings{Zhan-al:ASE20,
author = {Xian Zhan and
Lingling Fan and
Tianming Liu and
Sen Chen and
Li Li and
Haoyu Wang and
Yifei Xu and
Xiapu Luo and
Yang Liu},
title = {Automated {Third-Party} Library Detection for Android Applications: Are We There Yet?},
booktitle = {ASE},
pages = {919--930},
publisher = {{IEEE}},
year = {2020},
}