Vulcan: lessons on reliability of wearables through state-aware fuzzing
Vulcan: lessons on reliability of wearables through state-aware fuzzing
复制标题
DOI：
10.1145/3386901.3388916
复制
发表时间：
2020-06
期刊：
影响因子：
--
通讯作者：
E. Yi;Heng Zhang-;A. Maji;Kefan Xu;S. Bagchi
中科院分区：
文献类型：
--
作者：
E. Yi;Heng Zhang-;A. Maji;Kefan Xu;S. Bagchi
当我们希望使用佩戴OS（以前称为Android Wear）设备进行健身和健康监测时，评估其生态系统的可靠性很重要。本文的目的是了解磨损OS生态系统中的可靠性弱点。我们开发了一种国家感知的模糊工具，即Vulcan，而没有任何提高特权，以通过模糊磨损OS应用程序来揭示这些薄弱的斑点。我们通过从Google Play商店下载了100个流行的应用程序来评估由于这些薄弱的景点的结果。结果包括导致特定的应用程序崩溃，导致运行应用程序变得无反应，并导致设备重新启动。我们最终提出了一种概念验证缓解解决方案，以解决系统重新启动问题。
As we look to use Wear OS (formerly known as Android Wear) devices for fitness and health monitoring, it is important to evaluate the reliability of its ecosystem. The goal of this paper is to understand the reliability weak spots in Wear OS ecosystem. We develop a state-aware fuzzing tool, Vulcan, without any elevated privileges, to uncover these weak spots by fuzzing Wear OS apps. We evaluate the outcomes due to these weak spots by fuzzing 100 popular apps downloaded from Google Play Store. The outcomes include causing specific apps to crash, causing the running app to become unresponsive, and causing the device to reboot. We finally propose a proof-of-concept mitigation solution to address the system reboot issue.