Analyzing android taint analysis tools : FlowDroid, Amandroid, and DroidSafe
department or school: Applied Science, Faculty of
department or school: Electrical and Computer Engineering, Department of
data provider: DSpace
degree campus: UBCV
creator: Zhang, Junbin
issued: 2022-07-31T07:00:00Z
issued: 2020
related degree: Master of Applied Science - MASc
degree grantor: University of British Columbia
description: Numerous static taint analysis techniques have recently been proposed for identifying information flows in mobile applications. These techniques are often optimized and evaluated on a set of synthetic benchmarks, which makes the comparison results difficult to generalize. Moreover, the techniques are commonly compared under different configuration setups, rendering the comparisons inaccurate. In this paper, we provide a large, controlled, and independent comparison of the three most prominent static taint analysis tools: FlowDroid, Amandroid, and DroidSafe. We align the configuration setup for the tools and evaluate them on both a set of common benchmarks and on real applications from the Google Play app store. We compare the results of our analysis to the results reported in previous studies, identify main reasons for inaccuracy in existing tools, and provide suggestions for future research.
aggregated CHO: https://circle.library.ubc.ca/rest/handle/2429/75340
note: Analyzing Android Taint Analysis Tools: FlowDroid,Amandroid, and DroidSafebyJunbin ZhangB.Eng., Sun Yat-Sen University, 2017B.Eng., The Hong Kong Polytechnic University, 2017A THESIS SUBMITTED IN PARTIAL FULFILLMENTOF THE REQUIREMENTS FOR THE DEGREE OFMaster of Applied ScienceinTHE FACULTY OF APPLIED SCIENCE(Electrical & Computer Engineering)The University of British Columbia(Vancouver)July 2020© Junbin Zhang, 2020The following individuals certify that they have read, and recommend to the Fac-ulty of Graduate and Postdoctoral Studies for acceptance, the thesis entitled:Analyzing Android Taint Analysis Tools: FlowDroid, Amandroid, and DroidSafesubmitted by Junbin Zhang in partial fulfillment of the requirements forthe degree of Master of Applied Sciencein Electrical & Computer EngineeringExamining Committee:Julia Rubin, Assistant Professor, Electrical & Computer Engineering, UBCSupervisorKarthik Pattabiraman, Associate Professor, Electrical & Computer Engineering, UBCSupervisory Committee MemberPhilippe Kruchten, Professor Emeritus, Electrical & Computer Engineering, UBCSupervisory Committee MemberiiAbstractNumerous static taint analysis techniques have recently been proposed for identi-fying information flows in mobile applications. These techniques are often opti-mized and evaluated on a set of synthetic benchmarks, which makes the compar-ison results difficult to generalize. Moreover, the techniques are commonly com-pared under different configuration setups, rendering the comparisons inaccurate.In this paper, we provide a large, controlled, and independent comparison of thethree most prominent static taint analysis tools: FLOWDROID, AMANDROID, andDROIDSAFE. We align the configuration setup for the tools and evaluate them onboth a set of common benchmarks and on real applications from the Google Playapp store. We compare the results of our analysis to the results reported in pre-vious studies, identify main reasons for inaccuracy in existing tools, and providesug…
has type: Thesis/Dissertation
date issued: 2020-11
is shown at: 10.14288/1.0392613
language: eng
degree discipline: Electrical and Computer Engineering
provider: Vancouver : University of British Columbia Library
publisher: University of British Columbia
rights: Attribution-NonCommercial-NoDerivatives 4.0 International
rights URI: http://creativecommons.org/licenses/by-nc-nd/4.0/
scholar level: Graduate
type: Text
identifier URI: http://hdl.handle.net/2429/75340