Data Flow Analysis on Android Platform with Fragment Lifecycle Modeling and Callbacks

Li, Yongfeng and Ouyang, Jinbing and Mao, Bing and Ma, Kai and Guo, Shanqing (2017) Data Flow Analysis on Android Platform with Fragment Lifecycle Modeling and Callbacks. EAI Endorsed Transactions on Security and Safety, 4 (11). e2. ISSN 2032-9393

[thumbnail of eai.7-12-2017.153394.pdf]
Available under License Creative Commons Attribution No Derivatives.

Download (1MB) | Preview


Smartphones carry a large quantity of sensitive information to satisfy people’s various requirements, but the way of using information is important to keep the security of users’ privacy. There are two kinds of misuses of sensitive information for apps. On the one hand, careless programmers may leak the data by accident. On the other hand, the attackers develop malware to collect sensitive data intentionally. Many researchers apply data flow analysis to detect data leakages of an app. However, data flow analysis on Android platform is quite different from the programs on desktop. Many researchers have solved some problems of data flow analysis on Android platform, like Activity lifecycle, callback methods, inter-component communication. We find that Fragment’s lifecycle also has an effect on the data flow analysis of Android apps. Some data will be leaked if we don’t take Fragment’s lifecycle into consideration when performing data flow analysis in Android apps. So in this paper, we propose an approach to model Fragment’s lifecycle and its relationship with Activity’s lifecycle, then introduce a tool called FragDroid based on FlowDroid [7]. We conduct some experiments to evaluate the effectiveness of our tool and the results show that there are 8% of apps in our data set using Fragment. In particular, for popular apps, the result is 50.8%. We also evaluate the performance of using FragDroid to analyze Android apps, the result shows the average overhead is 17%.

Item Type: Article
Uncontrolled Keywords: Data Flow, Fragment, Android, Program Analysis
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor IV
Date Deposited: 26 Mar 2021 13:52
Last Modified: 26 Mar 2021 13:52

Actions (login required)

View Item
View Item