Effective inter-component communication mapping in Android with Epicc: an essential step towards holistic security analysis

By Damien Octeau, Patrick Drew McDaniel, Somesh Jha, Alexandre Bartel, Eric Bodden, Jacques Klein, Yves Le Traon. 2013

359 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/8f1701f01fe27538ec8c009ee1497fa5f4fdc3ac

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

1. Kimberly Tam
2. Fengguo Wei
3. Li Li
4. Bradley Reaves
5. Davide Maiorca
6. Sankardas Roy
7. Siegfried Rasthofer
8. Giorgio Giacinto

Citations in the corpus

• The Evolution of Android Malware and Android Analysis Techniques (2017, background): “In one static study, Epicc [Octeau et al. 2013] created and analyzed a control-flow super graph to detect ICC information leaks.”
• *droid (2016, methodology): “Epicc [Octeau et al. 2013] is a static Android application analysis tool designed to analyze retargeted .apk files (if used in conjunction with Dare [Octeau et al. 2012]).”
• Apposcopy: semantics-based detection of Android malware through static analysis (2014, unknown): “Epicc [32] also addresses ICC in Android and proposes a static analysis for inferring ICC specifications.”
• Semantics-Aware Android Malware Classification Using Weighted Contextual API Dependency Graphs (2014, methodology): “Effective Inter-Component Communication Mapping in Android with Epicc: An Essential Step Towards Holistic Security Analysis.”
• IccTA: Detecting Inter-Component Privacy Leaks in Android Apps (2015, methodology): “Epicc is a tool, based on Soot and Heros [13], to identify ICC methods as well as their parameter values (e.g., action, category).”
• Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps (2014, methodology): “We then experimentally compare Amandroid with two static analyzers for Android: FlowDroid [6, 17] and Epicc [25], and show that Amandroid can address a wide range of security problems due to inter-component communications in Android that cannot be handled by these existing tools.”
• Evaluating Analysis Tools for Android Apps: Status Quo and Robustness Against Obfuscation (2016, background): “Epicc [14], ComDroid [5] and Flow-Droid [9] were unable to properly analyze data being passed around after obfuscation.”
• Information Flow Analysis of Android Applications in DroidSafe (2015, methodology): “IccTA [14] combines FlowDroid with Epicc and seeks to identify sensitive inter-component and inter-application information flows.”
• FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps (2014, methodology): “In the future, we plan to integrate FLOWDROID with EPICC [27], a novel static analysis that uses String analysis to precisely resolve inter-app communication.”
• Static analysis of android apps: A systematic literature review (2017, methodology): “As examples, Epicc [8] and IC3 [27] attempts to extract the necessary information of ICC in Android apps which can support other approaches, including IccTA [6], and DidFail [24] , in performing ICC-aware analyses across components.”