How Reliable is My Wearable: A Fuzz Testing-Based Study
How Reliable is My Wearable: A Fuzz Testing-Based Study
复制标题
我的可穿戴设备有多可靠：基于模糊测试的研究
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
S. Bagchi
中科院分区：
文献类型：
--
作者：
E. Yi;A. Maji;S. Bagchi
随着智能手表和健身监视器等可穿戴设备的受欢迎程度，并被吹捧为临床目的，因此评估Android Wear OS和此类设备上的应用程序的可靠性很重要。迄今为止，还没有通过系统的错误注入OS或应用程序进行的研究。我们在这项工作中解决了这一差距。我们为Android Wear应用程序和服务开发和开源一个模糊测试工具，称为Qui-Gon Jinn（QGJ）。我们通过突变过程间的通信信息和UI事件进行了广泛的断层注射研究，并在46个应用程序上指导大约150万个此类突变事件。这些应用程序分为两类：健康/健身等。我们研究的结果显示了一些与先前对Android研究不同的模式。多年来，输入验证有所改善，但是看到Android Wear Apps以更高的速度崩溃的Android Wear Apps崩溃。由于无特点的突变消息，偶尔会出现整个设备重新启动的令人不安的情况。令人放心的是，这些应用程序对于UI事件的突变非常健壮，其中只有0.05％会导致应用程序崩溃。
As wearable devices like smartwatches and fitness monitors gain in popularity and are being touted for clinical purposes, it becomes important to evaluate the reliability of Android Wear OS and apps on such devices. To date there has been no study done by systematic error injection into the OS or the apps. We address this gap in this work. We develop and open source a fuzz testing tool for Android Wear apps and services, called Qui-Gon Jinn (QGJ). We perform an extensive fault injection study by mutating inter-process communication messages and UI events and direct about 1.5M such mutated events at 46 apps. These apps are divided into two categories: health/fitness and other. The results of our study show some patterns distinct from prior studies of Android. Over the years, input validation has improved and fewer NullPointerExceptions are seen, however, Android Wear apps crash from unhandled IllegalStateExceptions at a higher rate. There are occasional troubling cases of the entire device rebooting due to unprivileged mutated messages. Reassuringly the apps are quite robust to mutations of UI events with only 0.05% of them causing an app crash.