TIIS (한국인터넷정보학회)
Current Result Document : 14 / 27
| 한글제목(Korean Title) |
A Practical Intent Fuzzing Tool for Robustness of Inter-Component Communication in Android Apps |
| 영문제목(English Title) |
A Practical Intent Fuzzing Tool for Robustness of Inter-Component Communication in Android Apps |
| 저자(Author) |
Muhammad Fahad Khan
Farhan Aadil
Muazzam Maqsood
Salabat Khan
Bilal Haider Bukhari
Kwanghoon Choi
Myungpil Ko
Byeong-Mo Chang
|
| 원문수록처(Citation) |
VOL 12 NO. 09 PP. 4248 ~ 4270 (2018. 09) |
한글내용
(Korean Abstract) |
|
영문내용
(English Abstract) |
This research aims at a new practical Intent fuzzing tool for detecting Intent vulnerabilities of Android apps causing the robustness problem. We proposed two new ideas. First, we designed an Intent specification language to describe the structure of Intent, which makes our Intent fuzz testing tool flexible. Second, we proposed an automatic tally method classifying unique failures. With the two ideas, we implemented an Intent fuzz testing tool called Hwacha, and evaluated it with 50 commercial Android apps. Our tool offers an arbitrary combination of automatic and manual Intent generators with executors such as ADB and JUnit due to the use of the Intent specification language. The automatic tally method excluded almost 80% of duplicate failures in our experiment, reducing efforts of testers very much in review of failures. The tool uncovered more than 400 unique failures including what is unknown so far. We also measured execution time for Intent fuzz testing, which has been rarely reported before. Our tool is practical because the whole procedure of fuzz testing is fully automatic and the tool is applicable to the large number of Android apps with no human intervention.
|
| 키워드(Keyword) |
VANETs
LBF
Optimization
Intelligent Transportation Systems and clustering
|
| 파일첨부 |
PDF 다운로드
|
