@inproceedings{5bf7063a84a949209c858c1d31a80fe9,
title = "Automatic generation of inter-component communication exploits for android applications",
abstract = "Although a wide variety of approaches identify vulnerabilities in Android apps, none attempt to determine exploitability of those vulnerabilities. Exploitability can aid in reducing false positives of vulnerability analysis, and can help engineers triage bugs. Specifically, one of the main attack vectors of Android apps is their inter-component communication interface, where apps may receive messages called Intents. In this paper, we provide the first approach for automatically generating exploits for Android apps, called LetterBomb, relying on a combined path-sensitive symbolic execution-based static analysis, and the use of software instrumentation and test oracles. We run LetterBomb on 10, 000 Android apps from Google Play, where we identify 181 exploits from 835 vulnerable apps. Compared to a state-of-the-art detection approach for three ICC-based vulnerabilities, LetterBomb obtains 33\%-60\% more vulnerabilities at a 6.66 to 7 times faster speed.",
keywords = "Android, Exploit, Test generation, Test oracle, Vulnerability",
author = "Joshua Garcia and Mahmoud Hammad and Negar Ghorbani and Sam Malek",
note = "Publisher Copyright: {\textcopyright} 2017 Association for Computing Machinery.; 11th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, ESEC/FSE 2017 ; Conference date: 04-09-2017 Through 08-09-2017",
year = "2017",
month = aug,
day = "21",
doi = "10.1145/3106237.3106286",
language = "English",
series = "Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering",
publisher = "Association for Computing Machinery",
pages = "661--671",
editor = "Andrea Zisman and Eric Bodden and Wilhelm Schafer and \{van Deursen\}, Arie",
booktitle = "ESEC/FSE 2017 - Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering",
address = "United States",
}