Soundness-guided security analysis for android applications

该项目旨在开发一种健全指导的程序分析，以减轻Android应用程序中由反射和动态类加载引起的安全威胁，同时不影响精度和可扩展性。这两种动态代码更新技术都广泛用于良性和恶意应用程序，但最先进的恶意软件分析工具忽略或错误地处理它们，错过了安全威胁和漏洞。由此产生的开源安全分析工具将允许软件行业和企业（从国家安全、金融、银行到医疗保健、零售、电信）在软件开发早期有效地测试其移动软件的代码缺陷或安全威胁，并显著降低成本。

This project aims to develop a soundness-guided programme analysis to mitigate security threats caused by reflection and dynamic class loading in Android apps, without compromising precision and scalability. Both dynamic code update techniques are widely used in benign and malware apps, but state-of-the-art malware analysis tools ignore or mishandle them, missing security threats and vulnerabilities. The resulting open-source security analysis tool will allow software industries and enterprises (from national security, finance, banking to healthcare, retail, telecommunications) to test their mobile software effectively for code defects or security threats early at software development time at significantly reduced cost.