Search

Your search keyword '"Barbara G. Ryder"' showing total 250 results
Start Over Author "Barbara G. Ryder"
250 results on '"Barbara G. Ryder"'

22. A Longitudinal Study of Application Structure and Behaviors in Android

Author

Barbara G. Ryder and Haipeng Cai

Subjects
Longitudinal study, Computer science, Mobile computing, 020207 software engineering, 02 engineering and technology, Static analysis, Tracing, Computer security, computer.software_genre, 0202 electrical engineering, electronic engineering, information engineering, Callback, Android (operating system), computer, Software
Abstract

With the rise of the mobile computing market, Android has received tremendous attention from both academia and industry. Application programming in Android is known to have unique characteristics, and Android apps be particularly vulnerable to various security attacks. In response, numerous solutions for particular security issues have been proposed. However, there is little broad understanding about Android app code structure and behaviors along with their implications for app analysis and security defense, especially in an evolutionary perspective. To mitigate this gap, we present a longitudinal characterization study of Android apps to systematically investigate how they are built and execute over time. Through lightweight static analysis and method-level tracing, we examined the code and execution of 17,664 apps sampled from the apps developed in each of eight past years, with respect to metrics in three complementary dimensions. Our study revealed that (1) apps functionalities heavily rely on the Android framework/SDK, and the reliance continues to grow, (2) Activity components constantly dominated over other types of components and were responsible for the invocation of most lifecycle callbacks, (3) event-handling callbacks consistently focused more on user-interface events than system events, (4) the overall use of callbacks has been slowly diminishing over time, (5) the majority of exercised inter-component communications (ICCs) did not carry any data payloads, and (6) sensitive data sources and sinks targeted only one/two dominant categories of information or operations, and the ranking of source/sink categories remained quite stable throughout the eight years. We discuss the implications of our empirical findings for cost-effective app analysis and security defense for Android, and make cost-effectiveness improvement recommendations accordingly.

Published
2021
Full Text
View/download PDF

Catalog

Books, media, physical & digital resources
See catalog results