Wed 17 Jul 2019 18:00 - 19:30 at Mancy - Poster session

Android apps cooperate through message passing via intents. However, when apps have disparate sets of privileges inter-app communication (IAC) can accidentally or maliciously be misused, e.g., to leak sensitive information contrary to users’ expectations. Recent research has considered static program analysis to detect dangerous data leaks due to inter-component communication (ICC), but suffers from shortcomings for IAC with respect to precision, soundness, and scalability. To solve these issues we propose a novel pre-analysis for static ICC/IAC analysis. Using a database of summary information concerning intent communication we perform a fixed-point iteration of ICC/IAC summary information to precisely resolve intent communication involving two or more apps. We integrate the results of our pre-analysis with information flows generated by a baseline (i.e. not considering intents) information flow analysis, and resolve if sensitive data is flowing (transitively) through components/apps in order to be ultimately leaked. Our main contribution is the first fully automatic sound and precise ICC/IAC information flow analysis that is scalable for realistic apps due to modularity, avoiding combinatorial explosion: Our approach determines communicating apps using short summaries rather than inlining intent calls between components and apps, which requires simultaneously analyzing all apps installed on a device. We evaluated our tool IIFA in terms of scalability, precision, and recall. Using benchmarks we establish that precision and recall are not negatively impacted by our pre-analysis approach with respect to prominent state-of-the-art analyses for ICC/IAC. But foremost, applied to the 90 most popular applications from the Google Playstore, IIFA demonstrated its scalability to a large corpus of real-world apps. IIFA reports 62 problematic ICC-/IAC-related information flows via two or more apps/components.

IIFA: Modular Inter-app Intent Information Flow Analysis of Android Applications (ECOOP_Poster2019.pdf)1.15MiB

Wed 17 Jul

ecoop-2019-Posters
18:00 - 19:30: Posters - Poster session at Mancy
ecoop-2019-Posters18:00 - 19:30
Poster
Linghui LuoPaderborn University, Julian DolbyIBM Research, Eric BoddenHeinz Nixdorf Institut, Paderborn University and Fraunhofer IEM
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Alexander Asp BockIT University of Copenhagen
ecoop-2019-Posters18:00 - 19:30
Poster
Willem PenninckxKU Leuven, Amin Timanyimec-Distrinet KU-Leuven, Bart JacobsKU Leuven
ecoop-2019-Posters18:00 - 19:30
Poster
Suvam MukherjeeIndian Institute of Science, Nitin John RajInternational Institute of Information Technology, Hyderabad, Krishnan GovindrajMicrosoft Research, Pantazis DeligiannisMicrosoft Research, Chandramouleswaran RavichandranMicrosoft Azure, Akash LalMicrosoft Research India, Aseem RastogiMicrosoft Research, Raja KrishnaswamyMicrosoft Azure
ecoop-2019-Posters18:00 - 19:30
Poster
Luca FranceschiniDIBRIS, University of Genova, Italy
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Manas ThakurIIT Madras, V Krishna NandivadaIIT Madras
ecoop-2019-Posters18:00 - 19:30
Poster
Yossi GilTechnion—Israel Institute of Technology, Ori RothTechnion
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Juan FumeroUniversity of Manchester, UK, Michail PapadimitriouUniversity of Manchester, UK, Christos KotselidisUniversity of Manchester, UK
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Thodoris SotiropoulosAthens University of Economics and Business, Benjamin LivshitsImperial College London, UK
ecoop-2019-Posters18:00 - 19:30
Poster
ecoop-2019-Posters18:00 - 19:30
Poster
Tetsuo KaminaOita University, Tomoyuki AotaniTokyo Institute of Technology
ecoop-2019-Posters18:00 - 19:30
Poster
Kang Hong JinSchool of Information Systems, Singapore Management University, Ferdian Thung, Julia LawallInria/LIP6, Gilles MullerLIP6-INRIA/UPMC, Lingxiao JiangSingapore Management University, David LoSingapore Management University
ecoop-2019-Posters18:00 - 19:30
Poster
Philipp Dominik SchubertHeinz Nixdorf Institut, Paderborn University
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Abhishek TiwariUniversity of Potsdam, Sascha GroßUniversity of Potsdam, Christian HammerUniversity of Potsdam
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Daniel A. A. PelsmaekerDelft University of Technology, Netherlands, Hendrik van AntwerpenTU Delft, Eelco VisserDelft University of Technology
ecoop-2019-Posters18:00 - 19:30
Poster
Matthias Eichholz, Eric CampbellCornell University, Nate FosterCornell University, Guido SalvaneschiTU Darmstadt, Mira MeziniTU Darmstadt, Germany
ecoop-2019-Posters18:00 - 19:30
Poster
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Lisa Nguyen Quang DoPaderborn University, Eric BoddenHeinz Nixdorf Institut, Paderborn University and Fraunhofer IEM
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Dhruv MakwanaUnaffiliated, Neel KrishnaswamiComputer Laboratory, University of Cambridge
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Jonas De BleserSofware Languages Lab, Vrije Universiteit Brussel, Coen De RooverVrije Universiteit Brussel
ecoop-2019-Posters18:00 - 19:30
Poster
Xiaoli LiangIBM Canada, Daryl MaierIBM Canada
ecoop-2019-Posters18:00 - 19:30
Poster
Jafar Haminimec-DistriNet, Depatrmant of Computer Science, KU Leuven, Belgium, Bart JacobsRadboud University Nijmegen
ecoop-2019-Posters18:00 - 19:30
Poster
Alex VillazónUniversidad Privada Boliviana, Bolivia, Haiyang SunUniversità della Svizzera italiana, Andrea RosàUniversity of Lugano, Switzerland, Eduardo RosalesUniversity of Lugano, Switzerland, Daniele BonettaOracle Labs, Isabella DefilippisUniversidad Privada Boliviana (UPB), Sergio OportoUniversidad Privada Boliviana (UPB), Walter BinderUniversity of Lugano, Switzerland
ecoop-2019-Posters18:00 - 19:30
Poster
Noah Van EsSofware Languages Lab, Vrije Universiteit Brussel, Quentin StiévenartVrije Universiteit Brussel, Belgium, Coen De RooverVrije Universiteit Brussel
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Amir ShaikhhaUniversity of Oxford, Lionel ParreauxEPFL
ecoop-2019-Posters18:00 - 19:30
Poster
Carmen Torres LopezVrije Universiteit Brussel, Robbert Gurdeep SinghUniversiteit Gent, Belgium, Stefan MarrUniversity of Kent, Elisa Gonzalez BoixVrije Universiteit Brussel, Belgium, Christophe ScholliersUniversiteit Gent, Belgium
ecoop-2019-Posters18:00 - 19:30
Poster
Shawn MeierUniversity of Colorado, Boulder, Sergio MoverEcole Polytechnique, Bor-Yuh Evan ChangUniversity of Colorado Boulder
ecoop-2019-Posters18:00 - 19:30
Poster
Pascal WeisenburgerTechnische Universität Darmstadt, Guido SalvaneschiTU Darmstadt
ecoop-2019-Posters18:00 - 19:30
Poster
Andrew CraikIBM Canada, Rahil ShahIBM Canada, Ben ThomasIBM Canada, Devin PapineauIBM Canada
ecoop-2019-Posters18:00 - 19:30
Poster
Felix PauckPaderborn University, Germany
Media Attached
ecoop-2019-Posters18:00 - 19:30
Poster
Matthias SpringerTokyo Institute of Technology, Hidehiko MasuharaTokyo Institute of Technology
ecoop-2019-Posters18:00 - 19:30
Poster
Kiko Fernandez-ReyesUppsala University, Dave ClarkeUppsala Univ. Sweden and KU Leuvern, Ludovic HenrioCNRS, Einar Broch JohnsenUniversity of Oslo, Tobias WrigstadUppsala University
File Attached
ecoop-2019-Posters18:00 - 19:30
Poster
George FourtounisUniversity of Athens, Yannis SmaragdakisUniversity of Athens