liankee / cldroid

A data pool-aware static analyzer to detect cross-layer threats in Android apps.

CLDroid

CLDroid provides an end-to-end solution to statically detect cross-layer threats in Android apps (implemented based on Soot framework).

Given an Android app, CLDroid first identifies the data pools (e.g., shared preference files and databases) that may be injected by external apps through exported components. Second, CLDroid employs data identifier-based analysis to track the data flow of data items that traverse through the target data pool. Third, CLDroid learns app-specific data use semantics and universally assesses their security risks from the perspectives of two attack vectors (i.e., data loading and data consuming).

For more details, welcome to follow our paper:

Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, and Min Yang. 2024. Component
Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. Proc.
ACM Softw. Eng. 1, FSE, Article 4 (July 2024)

cldroid's Issues

运行报错

在我尝试运行该项目的过程中，反复遇到以下异常信息：
java.lang.RuntimeException: This operation requires resolving level BODIES but com.google.android.gms.auth.api.signin.RevocationBoundService is at resolving level SIGNATURES
If you are extending Soot, try to add the following call before calling soot.Main.main(..):
Scene.v().addBasicClass(com.google.android.gms.auth.api.signin.RevocationBoundService,BODIES);
Otherwise, try whole-program mode (-w).
at soot.SootClass.checkLevelIgnoreResolving(SootClass.java:198)
at soot.SootClass.checkLevel(SootClass.java:180)
at soot.SootMethod.retrieveActiveBody(SootMethod.java:391)
at analyze.Main.getGetIntentInvokeUnit(Main.java:226)
at analyze.Main.doAnalyze(Main.java:158)
at analyze.Main.access$400(Main.java:25)
at analyze.Main$1.work(Main.java:128)
at util.DirTraversal.traverse(DirTraversal.java:20)
at analyze.Main.main(Main.java:131)

RE: Research Paper

Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, and Min Yang. 2024. Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. Proc. ACM Softw. Eng. 1, FSE, Article 4 (July 2024)

Is this paper publicly available?