AutoPatchDroid: A framework for patching inter-app vulnerabilities in android application

• Published in: 2017 IEEE International Conference on Communications (ICC) pp. 1 - 6
• Main Authors: Jiayun Xie, Xiao Fu, Xiaojiang Du, Bin Luo, Guizani, Mohsen
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.05.2017
• Subjects: Android; Bytecode Rewriting; Information systems; Inter-App Attack; Security; Static Analysis
• DOI: 10.1109/ICC.2017.7996682

Recently, an increasing number of inter-app attacks such as confused deputy attacks, data leakage attacks and collusion attacks spring up. However, there is no perfect defense method against them. As we all know, developers play an important role in android security, but their weak consciousness about the security may lead to inter-app attacks. Therefore, considered for developers, it is important to investigate and try to defend against such attacks in android. This paper presents typical inter-app attacks in android and proposes AutoPatchDroid, an automatic framework to find the vulnerable code in apps and patch them automatically. We firstly find the vulnerable paths from sources to sinks, sources to execution exit points, execution entry points to sinks and execution entry points to execution exit points in the application using static analysis. Then we locate the vulnerable code pieces and insert the patch code to guard against such attacks. AutoPatchDroid prevent inter-app attacks in the application level rather than modifying the kernel or framework. We use DroidBench and IccRE to evaluate our framework, and find that AutoPatchDroid could effectively secure the apps. The runtime overhead introduced by AutoPatchDroid is 1.105% on average.