Wed 17 Jul 2019 18:00 - 19:30 at Mancy - Poster session

Android apps cooperate through message passing via intents. However, when apps have disparate sets of privileges inter-app communication (IAC) can accidentally or maliciously be misused, e.g., to leak sensitive information contrary to users’ expectations. Recent research has considered static program analysis to detect dangerous data leaks due to inter-component communication (ICC), but suffers from shortcomings for IAC with respect to precision, soundness, and scalability. To solve these issues we propose a novel pre-analysis for static ICC/IAC analysis. Using a database of summary information concerning intent communication we perform a fixed-point iteration of ICC/IAC summary information to precisely resolve intent communication involving two or more apps. We integrate the results of our pre-analysis with information flows generated by a baseline (i.e. not considering intents) information flow analysis, and resolve if sensitive data is flowing (transitively) through components/apps in order to be ultimately leaked. Our main contribution is the first fully automatic sound and precise ICC/IAC information flow analysis that is scalable for realistic apps due to modularity, avoiding combinatorial explosion: Our approach determines communicating apps using short summaries rather than inlining intent calls between components and apps, which requires simultaneously analyzing all apps installed on a device. We evaluated our tool IIFA in terms of scalability, precision, and recall. Using benchmarks we establish that precision and recall are not negatively impacted by our pre-analysis approach with respect to prominent state-of-the-art analyses for ICC/IAC. But foremost, applied to the 90 most popular applications from the Google Playstore, IIFA demonstrated its scalability to a large corpus of real-world apps. IIFA reports 62 problematic ICC-/IAC-related information flows via two or more apps/components.

IIFA: Modular Inter-app Intent Information Flow Analysis of Android Applications (ECOOP_Poster2019.pdf)1.16MiB

Wed 17 Jul
Times are displayed in time zone: Greenwich Mean Time : Belfast change

18:00 - 19:30: Poster sessionPosters at Mancy
18:00 - 19:30
Poster
MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and EditorsECOOP posterDemonstration
Posters
Linghui LuoPaderborn University, Julian DolbyIBM Research, Eric BoddenHeinz Nixdorf Institut, Paderborn University and Fraunhofer IEM
File Attached
18:00 - 19:30
Poster
A Parallel Spreadsheet Interpreter With Cycle Detection
Posters
Alexander Asp BockIT University of Copenhagen
18:00 - 19:30
Poster
Specifying I/O using Abstract Nested Hoare Triples in Separation LogicFTfJP posterDemonstration
Posters
Willem PenninckxKU Leuven, Amin Timanyimec-Distrinet KU-Leuven, Bart JacobsKU Leuven
18:00 - 19:30
Poster
Reliable State Machines: A Framework for Programming Reliable Cloud ServicesECOOP posterDemonstration
Posters
Suvam MukherjeeIndian Institute of Science, Nitin John RajInternational Institute of Information Technology, Hyderabad, Krishnan GovindrajMicrosoft Research, Pantazis DeligiannisMicrosoft Research, Chandramouleswaran RavichandranMicrosoft Azure, Akash LalMicrosoft Research India, Aseem RastogiMicrosoft Research, Raja KrishnaswamyMicrosoft Azure
18:00 - 19:30
Poster
RML: Runtime Monitoring LanguageVORTEX poster
Posters
Luca FranceschiniDIBRIS, University of Genova, Italy
File Attached
18:00 - 19:30
Poster
Precise, Efficient and Secure Just-In-Time Analysis of Java ProgramsAORTA poster
Posters
Manas ThakurIIT Madras, V Krishna NandivadaIIT Madras
18:00 - 19:30
Poster
Fling---A Fluent API GeneratorECOOP poster
Posters
Yossi GilTechnion—Israel Institute of Technology, Ori RothTechnion
File Attached
18:00 - 19:30
Poster
TornadoVM: Dynamic Optimisation of Heterogeneous Java AccelerationAORTA posterDemonstration
Posters
Juan FumeroUniversity of Manchester, UK, Michail PapadimitriouUniversity of Manchester, UK, Christos KotselidisUniversity of Manchester, UK
File Attached
18:00 - 19:30
Poster
Static Analysis for Asynchronous JavaScript ProgramsECOOP poster
Posters
Thodoris SotiropoulosAthens University of Economics and Business, Benjamin LivshitsImperial College London, UK
18:00 - 19:30
Poster
To Async or Not to Async: Better Cooperative Multithreading is the Answer
Posters
18:00 - 19:30
Poster
TinyCORP: A Calculus for Context-Oriented Reactive ProgrammingCOP poster
Posters
Tetsuo KaminaOita University, Tomoyuki AotaniTokyo Institute of Technology
18:00 - 19:30
Poster
Semantic Patches for Java Program TransformationECOOP posterDemonstration
Posters
Kang Hong JinSchool of Information Systems, Singapore Management University, Ferdian Thung, Julia LawallInria/LIP6, Gilles MullerLIP6-INRIA/UPMC, Lingxiao JiangSingapore Management University, David LoSingapore Management University
18:00 - 19:30
Poster
Static Analysis in Real-World Operational ScenariosDoctoral Symposium posterDemonstration
Posters
Philipp Dominik SchubertHeinz Nixdorf Institut, Paderborn University
File Attached
18:00 - 19:30
Poster
IIFA: Modular Inter-app Intent Information Flow Analysis of Android Applications
Posters
Abhishek TiwariUniversity of Potsdam, Sascha GroßUniversity of Potsdam, Christian HammerUniversity of Potsdam
File Attached
18:00 - 19:30
Poster
Towards Language-Parametric Semantic Editor ServicesECOOP posterDemonstration
Posters
Daniel A. A. PelsmaekerDelft University of Technology, Netherlands, Hendrik van AntwerpenTU Delft, Eelco VisserDelft University of Technology
18:00 - 19:30
Poster
Type-Safe Data Plane Programming with SafeP4ECOOP poster
Posters
Matthias Eichholz, Eric CampbellCornell University, Nate FosterCornell University, Guido SalvaneschiTU Darmstadt, Mira MeziniTU Darmstadt, Germany
18:00 - 19:30
Poster
Create your own Interpreter with a JITAORTA poster
Posters
File Attached
18:00 - 19:30
Poster
Lifting the Burden of Static Analysis Tool Configuration with Rule Graphs
Posters
Lisa Nguyen Quang DoPaderborn University, Eric BoddenHeinz Nixdorf Institut, Paderborn University and Fraunhofer IEM
File Attached
18:00 - 19:30
Poster
NumLin: Linear Types for Linear AlgebraECOOP posterDemonstration
Posters
Dhruv MakwanaUnaffiliated, Neel KrishnaswamiComputer Laboratory, University of Cambridge
File Attached
18:00 - 19:30
Poster
Towards Resilience Testing of Actor Programs through Test PerturbationsScala poster
Posters
Jonas De BleserSofware Languages Lab, Vrije Universiteit Brussel, Coen De RooverVrije Universiteit Brussel
18:00 - 19:30
Poster
JIT as a Service: Compilation Paradigm for the CloudAORTA poster
Posters
Xiaoli LiangIBM Canada, Daryl MaierIBM Canada
18:00 - 19:30
Poster
Transferring Obligations Through SynchronizationsECOOP posterDemonstration
Posters
Jafar Haminimec-DistriNet, Depatrmant of Computer Science, KU Leuven, Belgium, Bart JacobsRadboud University Nijmegen
18:00 - 19:30
Poster
Automated Large-scale Multi-language Dynamic Program Analysis in the WildECOOP poster
Posters
Alex VillazónUniversidad Privada Boliviana, Bolivia, Haiyang SunUniversità della Svizzera italiana, Andrea RosàUniversity of Lugano, Switzerland, Eduardo RosalesUniversity of Lugano, Switzerland, Daniele BonettaOracle Labs, Isabella DefilippisUniversidad Privada Boliviana (UPB), Sergio OportoUniversidad Privada Boliviana (UPB), Walter BinderUniversity of Lugano, Switzerland
18:00 - 19:30
Poster
Garbage-free Abstract Interpretation through Abstract Reference CountingECOOP poster
Posters
Noah Van EsSofware Languages Lab, Vrije Universiteit Brussel, Quentin StiévenartVrije Universiteit Brussel, Belgium, Coen De RooverVrije Universiteit Brussel
File Attached
18:00 - 19:30
Poster
Finally, a Polymorphic Linear Algebra LanguageECOOP poster
Posters
Amir ShaikhhaUniversity of Oxford, Lionel ParreauxEPFL
18:00 - 19:30
Poster
Multiverse Debugging: Non-deterministic Debugging for Non-deterministic ProgramsECOOP posterDemonstration
Posters
Carmen Torres LopezVrije Universiteit Brussel, Robbert Gurdeep SinghUniversiteit Gent, Belgium, Stefan MarrUniversity of Kent, Elisa Gonzalez BoixVrije Universiteit Brussel, Belgium, Christophe ScholliersUniversiteit Gent, Belgium
18:00 - 19:30
Poster
Lifestate: Event-Driven Protocols and Callback Control FlowECOOP poster
Posters
Shawn MeierUniversity of Colorado, Boulder, Sergio MoverEcole Polytechnique, Bor-Yuh Evan ChangUniversity of Colorado Boulder
18:00 - 19:30
Poster
Distributed System Development with ScalaLociECOOP poster
Posters
Pascal WeisenburgerTechnische Universität Darmstadt, Guido SalvaneschiTU Darmstadt
18:00 - 19:30
Poster
Lightweight Software Profiling of Compiled CodeAORTA poster
Posters
Andrew CraikIBM Canada, Rahil ShahIBM Canada, Ben ThomasIBM Canada, Devin PapineauIBM Canada
18:00 - 19:30
Poster
Android App Analysis Query LanguageBenchWork posterDemonstration
Posters
Felix PauckPaderborn University, Germany
Media Attached
18:00 - 19:30
Poster
DynaSOAr: A Parallel Memory Allocator for OOP on GPUsECOOP poster
Posters
Matthias SpringerTokyo Institute of Technology, Hidehiko MasuharaTokyo Institute of Technology
18:00 - 19:30
Poster
Godot: All the Benefits of Implicit and Explicit FuturesECOOP poster
Posters
Kiko Fernandez-ReyesUppsala University, Dave ClarkeUppsala Univ. Sweden and KU Leuvern, Ludovic HenrioCNRS, Einar Broch JohnsenUniversity of Oslo, Tobias WrigstadUppsala University
File Attached
18:00 - 19:30
Poster
Deep Static Modeling of invokedynamicECOOP poster
Posters
George FourtounisUniversity of Athens, Yannis SmaragdakisUniversity of Athens