Detecting Asynchronous Event-Driven Order Violations in Android Apps

检测 Android 应用中异步事件驱动的订单违规

• 批准号: DP210102409
• 负责人: Prof Jingling Xue
• 金额: $ 22.17万
• 依托单位: The University of New South Wales
• 依托单位国家: 澳大利亚
• 项目类别: Discovery Projects
• 财政年份: 2022
• 资助国家: 澳大利亚
• 起止时间: 2022-03-01 至 2025-02-28
• 项目状态: 未结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/DP210102409
• 关键词: Detecting; Asynchronous; Event; Driven; Order

This project aims to develop an event-interleaving analysis for detecting asynchronous event-driven order violations in Android apps. This project therefore expects to deliver a program analysis foundation that can provide stronger security guarantees than the state of the art against advanced exploits that abuse such asynchronous vulnerabilities. The intended outcomes of this project are a new program analysis technology and an industrial-strength open-source framework that can significantly raise the bar on mobile software quality and security for Android, the dominant smartphone platform accounting a current market share at 87.0% with 2.9 million apps at Google Play in December 2019.

该项目旨在开发一个事件交织分析，用于检测Android应用程序中异步事件驱动的顺序违规。因此，该项目希望提供一个程序分析基础，可以提供比最先进的技术更强的安全保证，以防止滥用此类异步漏洞的高级漏洞利用。该项目的预期成果是一种新的程序分析技术和一个工业实力的开源框架，可以显著提高Android的移动的软件质量和安全性，Android是占主导地位的智能手机平台，目前的市场份额为87.0%，2019年12月在Google Play有290万个应用程序。