Brahmastra: Driving Apps to Test the Security of Third-Party Components

By Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Jaeyeon Jung, Suman Nath, Rui Wang, David Wetherall. 2014

127 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Model-Reuse Attacks on Deep Learning Systems (2018, background): “Indeed, the risks of reusing external modules in software development have long been recognized by the security research communities [2, 6, 16].”
Rico: A Mobile App Dataset for Building Data-Driven Design Applications (2017, background): “Automated agents, on the other hand, can be used to exhaustively process the interactive elements on a UI screen [9, 34]; however, they can be stymied by UIs that require complex interaction sequences or human inputs (Figure 4) [5].”
Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps (2014, background): “Many security problems of Android apps can be discovered by static analysis on the Dalvik bytecode of the apps, and there have been a number of earlier efforts along this line [6, 8, 10, 12, 20, 26, 34, 37, 43, 47, 51, 53, 58, 62, 65, 67].”
Static analysis of android apps: A systematic literature review (2017, methodology): “DEX ASSEMBLER Adagio [65], AndRadar [72], Androguard2 [74], Androguard [76], AQUA [142], Brahmastra [146], Brox [103], ComDroid [117], CryptoLint [54], Dflow+DroidInfer [132], Lin et al.”
*droid (2016, methodology): “…apps to improve security aspects of application libraries [Georgiev et al. 2014; Shekhar et al. 2012] or to enhance the expressiveness of a permission model [Bhoraskar et al. 2014] or user-speciﬁed policy [Davis and Chen 2013], or to repair already discovered vulnerabilities [Zhang and Yin 2014].”
A Survey of App Store Analysis for Software Engineering (2017, methodology): “[26] mined 1,010 apps from Google Play and”
DroidBot: A Lightweight UI-Guided Test Input Generator for Android (2017, background): “SmartDroid [15] and Brahmastra [16] are focused on targeted testing which aims to trigger certain pieces of code.”
Free for All! Assessing User Data Exposure to Advertising Libraries on Android (2016, background): “Those works mainly fall into three general categories: (1) static scanning [18], [17], [31], [5], [8], (2) dynamic monitoring [43], [52], [48], [14], and (3) hybrid techniques using both [33].”