Do Android taint analysis tools keep their promises?

Felix Pauck, Eric Bodden, Heike Wehrheim

Abstract

In recent years, researchers have developed a number of tools to conduct taint analysis of Android applications. While all the respective papers aim at providing a thorough empirical evaluation, comparability is hindered by varying or unclear evaluation targets. Sometimes, the apps used for evaluation are not precisely described. In other cases, authors use an established benchmark but cover it only partially. In yet other cases, the evaluations differ in terms of the data leaks searched for, or lack a ground truth to compare against. All those limitations make it impossible to truly compare the tools based on those published evaluations.

BibTeX

@inproceedings{Pauck-al:FSE18,
  author    = {Felix Pauck and
               Eric Bodden and
               Heike Wehrheim},
  title     = {Do Android taint analysis tools keep their promises?},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {331--341},
  publisher = {{ACM}},
  year      = {2018},
}

Do Android taint analysis tools keep their promises?

Abstract

Related papers