TY  - GEN
A1  - Gross, Sascha
A1  - Tiwari, Abhishek
A1  - Hammer, Christian
T1  - PlAnalyzer
BT  - a precise approach for pendingIntent vulnerability analysis
T2  - Computer Security(ESORICS 2018), PT II
N2  - In this work we propose PIAnalyzer, a novel approach to analyze PendingIntent related vulnerabilities. We empirically evaluate PIAnalyzer on a set of 1000 randomly selected applications from the Google Play Store and find 1358 insecure usages of Pendinglntents, including 70 severe vulnerabilities. We manually inspected ten reported vulnerabilities out of which nine correctly reported vulnerabilities, indicating a high precision. The evaluation shows that PIAnalyzer is efficient with an average execution time of 13 seconds per application.
KW  - Android
KW  - Intent analysis
KW  - Information flow control
KW  - Static analysis
Y1  - 2018
SN  - 978-3-319-98989-1
SN  - 978-3-319-98988-4
U6  - https://doi.org/10.1007/978-3-319-98989-1_3
SN  - 0302-9743
SN  - 1611-3349
VL  - 11099
SP  - 41
EP  - 59
PB  - Springer
CY  - Cham
ER  -