• Home
  • Search
  • AppChainer: investigating the chainability among payloads in android applications
  • Cite Icon2
  • https://doi.org/10.1186/s42400-023-00151-2Copy DOI Icon

AppChainer: investigating the chainability among payloads in android applications

Show More
  • Abstract
  • Highlights & Summary
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Statistics show that more than 80 applications are installed on each android smartphone. Vulnerability research on Android applications is of critical importance. Recently, academic researchers mainly focus on single bug patterns, while few of them investigate the relations between multiple bugs. Industrial researchers proposed a series of logic exploit chains leveraging multiple logic bugs. However, there is no general model to evaluate the chaining abilities between bugs. This paper presents a formal model to elucidate the relations between multiple bugs in Android applications. To prove the effectiveness of the model, we design and implement a prototype system named AppChainer. AppChainer automatically identifies attack surfaces of Android applications and investigates whether the payloads entering these attack surfaces are “chainable”. Experimental results on 2138 popular Android applications show that AppChainer is effective in identifying and chaining attacker-controllable payloads. It identifies 14467 chainable payloads and constructs 5458 chains both inside a single application and among various applications. The time cost and resource consumption of AppChainer are also acceptable. For each application, the average analysis time is 317 s, and the average memory consumed is 2368 MB. Compared with the most relevant work Jandroid, the experiment results on our custom DroidChainBench show that AppChainer outperforms Jandroid at the precision rate and performs equally with Jandroid at the recall rate.

Similar Papers
  • Conference Article
  • Citations24

Wireless water flow monitoring based on Android smartphone

  • Jan 01, 2016
  • Anif Jamaluddin +4
  • Research Article

Stop Contact Controlled By Android App Via Bluetooth

  • Dec 29, 2019
  • Journal of Science Technology (JoSTec)
  • Benny Agus Simanungkalit
  • Book Chapter

Migrating Android Applications to the Cloud

  • Jan 01, 2012
  • Shih-Hao Hung +2
  • Research Article
  • Citations1

Daily Score Cards on Android Smartphones

  • Sep 02, 2020
  • KnE Social Sciences
  • Rully Aprilia Zandra
  • Research Article
  • Citations4

Smart wheelchair using android smartphone for physically disabled people

  • Apr 03, 2018
  • International Journal of Engineering & Technology
  • Siti Nur Suhaila Mirin +2
  • Conference Article
  • Citations13

A GUI bug finding framework for Android applications

  • Mar 21, 2011
  • Cuixiong Hu +1
  • Research Article
  • Citations40

DATDroid: Dynamic Analysis Technique in Android Malware Detection

  • Mar 28, 2020
  • International Journal on Advanced Science, Engineering and Information Technology
  • Rajan Thangaveloo +3
  • Research Article
  • Citations9

Automatic Detection for Privacy Violations in Android Applications

  • Apr 15, 2022
  • IEEE Internet of Things Journal
  • Qian Luo +3
  • Research Article
  • Citations24

SISTEM KONTROL ROBOT PEMINDAH BARANG MENGGUNAKAN APLIKASI ANDROID BERBASIS ARDUINO UNO

  • Jan 21, 2015
  • CCIT Journal
  • Asep Saefullah +2
  • Conference Article
  • Citations2

Real time video processing and object detection on android smartphone

  • Jan 01, 2015
  • Sunil B Chaudhari +1
  • Conference Article
  • Citations10

Monitoring of Incubator Parameters Using Android Applications

  • Oct 15, 2021
  • Hanifah Rahmi Fajrin +2
  • Conference Article
  • Citations3

Wearable Fall Detection for Elderly with Simple Belt Design Using Android Application

  • Aug 05, 2021
  • Ilman Himawan Kusumah +3
  • Research Article
  • Citations27

Body temperature monitoring based on telemedicine

  • Nov 01, 2019
  • Journal of Physics: Conference Series
  • H R Fajrin +3
  • Research Article
  • Citations6

Microcontroller and Android HMI Based Water Level and Control System

  • Jan 28, 2019
  • EAI Endorsed Transactions on Internet of Things
  • Tri Lestariningsih +3
  • Conference Article
  • Citations34

Design and implementation of low cost ECG monitoring system for the patient using smartphone

  • Nov 01, 2015
  • Md Asif Ahamed +2
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.