An In-Depth Analysis of Android's Java Class Library: its Evolution and Security Impact

• Published in: 2023 IEEE Secure Development Conference (SecDev) pp. 133 - 144
• Main Authors: Riom, Timothee, Bartel, Alexandre
• Format: Conference Proceeding
• Language: English
• Published: IEEE 18.10.2023
• Subjects: Android; external dependency; Java; managing code complexity; OpenJDK; Security; Simi- larity Analysis; Similarity Analysis; Vulnerabilities; vulnerability management

Android is an operating system widely deployed especially on devices such as smartphones. In this paper, we study the evolution of OpenJDK Java Class Library (JCL) versions used as the basis of the Dalvik Virtual Machine (DVM) and the Android Runtime (ART). We also identify vulnerabilities impacting...