NDLI: Combining static analysis with probabilistic models to enable market-scale Android inter-component analysis

Content Provider	ACM Digital Library
Author	Klein, Jacques McDaniel, Patrick Le Traon, Yves Dering, Matthew Jha, Somesh Li, Li Octeau, Damien Bartel, Alexandre
Abstract	Static analysis has been successfully used in many areas, from verifying mission-critical software to malware detection. Unfortunately, static analysis often produces false positives, which require significant manual effort to resolve. In this paper, we show how to overlay a probabilistic model, trained using domain knowledge, on top of static analysis results, in order to triage static analysis results. We apply this idea to analyzing mobile applications. Android application components can communicate with each other, both within single applications and between different applications. Unfortunately, techniques to statically infer Inter-Component Communication (ICC) yield many potential inter-component and inter-application links, most of which are false positives. At large scales, scrutinizing all potential links is simply not feasible. We therefore overlay a probabilistic model of ICC on top of static analysis results. Since computing the inter-component links is a prerequisite to inter-component analysis, we introduce a formalism for inferring ICC links based on set constraints. We design an efficient algorithm for performing link resolution. We compute all potential links in a corpus of 11,267 applications in 30 minutes and triage them using our probabilistic approach. We find that over 95.1% of all 636 million potential links are associated with probability values below 0.01 and are thus likely unfeasible links. Thus, it is possible to consider only a small subset of all links without significant loss of information. This work is the first significant step in making static inter-application analysis more tractable, even at large scales.
Starting Page	469
Ending Page	484
Page Count	16
File Format	PDF
ISSN	03621340 15581160
DOI	10.1145/2914770.2837661
Journal	ACM SIGPLAN Notices (SIGP)
Volume Number	51
Issue Number	1
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1983-05-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Inter-component communication Static analysis Android icc Probabilistic program analysis
Content Type	Text
Resource Type	Article
Subject	Computer Graphics and Computer-Aided Design Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Combining static analysis with probabilistic models to enable market-scale Android inter-component analysis

Enforcing object protocols by combining static and runtime analysis

Static analysis of aspect interaction and composition in component models

ShamDroid: gracefully degrading functionality in the presence of limited resource access

Combining concern input with program analysis for bloat detection

Determinacy in static analysis for jQuery

Static analysis for probabilistic programs:inferring whole program properties from finitely many paths

Finding resume and restart errors in Android applications

Static analysis for independent app developers

Combining static analysis with probabilistic models to enable market-scale Android inter-component analysis

Similar Documents

Combining static analysis with probabilistic models to enable market-scale Android inter-component analysis

Enforcing object protocols by combining static and runtime analysis

Static analysis of aspect interaction and composition in component models

ShamDroid: gracefully degrading functionality in the presence of limited resource access

Combining concern input with program analysis for bloat detection

Determinacy in static analysis for jQuery

Static analysis for probabilistic programs:inferring whole program properties from finitely many paths

Finding resume and restart errors in Android applications

Static analysis for independent app developers

Combining static analysis with probabilistic models to enable market-scale Android inter-component analysis