AppsPlayground: Automatic Security Analysis of Smartphone Applications
Today's smartphone application markets host an ever increasing number of applications. The sheer number of applications makes their review a daunting task. The authors propose AppsPlayground, a framework for automatically driving smartphone applications using their user interface characteristics, supporting complex user interactions, including the ability to create and supply login credentials. Evaluating their Android implementation of AppsPlayground on about 4,000 popular applications, they observed a 25% improvement over fuzz testing for coverage of application code. The primary contribution of AppsPlayground is providing scalability for existing and future dynamic analysis engines. As a demonstration, they combine AppsPlayground and TaintDroid to automatically discover privacy concerns in the studied applications.