A Survey on Secure Android Apps Development Life-Cycle: Vulnerabilities and Tools - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue International Journal On Advances in Security Année : 2023

A Survey on Secure Android Apps Development Life-Cycle: Vulnerabilities and Tools

Résumé

Mobile devices are increasingly used in our daily lives. To fulfill the needs of smartphone users, the development of mobile applications has been growing at a high rate. As developers are not necessarily aware of security concerns, most of these applications do not address security aspects appropriately and usually contain vulnerabilities. Therefore, it is essential to incorporate security into the app development life-cycle. To help development teams to address security issues, several security integrated development environment (IDE) plugins have been proposed. In this paper, we aim to review the effectiveness of existing IDE plugins in detecting known Android vulnerabilities. We developed a classification framework that highlights the salient features related to 16 selected IDE plugins including: (1) the analysis-based approach, (2) the vulnerabilities checks coverage, and (3) the development stage, on which these tools could be employed. We proceeded to a deep analysis process where each tool effectiveness is investigated against 19 vulnerabilities. Each vulnerability has been demonstrated by executing a corresponding attack scenario on the recent version 12 of Android. The study results provide an overview of the current state of secure Android application development and highlight limitations and weaknesses. Limits such as: tools unavailability, benchmarks incompleteness, and the need of dynamic analysis approaches adoption are among the main findings of this study. The paper synthesizes valuable information for future research on IDE plugins for detecting Android-related vulnerabilities.
Fichier principal
Vignette du fichier
tebib_sec_v16_n12_2023_survey.pdf (2.15 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-04181107 , version 1 (11-09-2023)

Licence

Domaine public

Identifiants

  • HAL Id : hal-04181107 , version 1

Citer

Mohammed El Amin Tebib, Mariem Graa, Pascal Andre, Oum-El-Kheir Aktouf. A Survey on Secure Android Apps Development Life-Cycle: Vulnerabilities and Tools. International Journal On Advances in Security, 2023, 16 (1 & 2), pp.54-71. ⟨hal-04181107⟩
239 Consultations
115 Téléchargements

Partager

Gmail Facebook X LinkedIn More