DroidFuzzer: Fuzzing the Android Apps with Intent-Filter Tag

Authors:
Hui Ye;Shaoyin Cheng;Lanbo Zhang;Fan Jiang
Affiliations:
University of Science and Technology of China, Hefei, 230027, P.R.China;University of Science and Technology of China, Hefei, 230027, P.R.China;University of California, Santa Cruz, CA 95064, USA;University of Science and Technology of China, Hefei, 230027, P.R.China
Venue:
Proceedings of International Conference on Advances in Mobile Computing & Multimedia
Year:
2013

Citing 5
Cited 0

An empirical study of the reliability of UNIX utilities

Communications of the ACM
Active property checking

EMSOFT '08 Proceedings of the 8th ACM international conference on Embedded software
An empirical study of the robustness of Inter-component Communication in Android

DSN '12 Proceedings of the 2012 42nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Dynodroid: an input generation system for Android apps

Proceedings of the 2013 9th Joint Meeting on Foundations of Software Engineering
A Fuzzing Framework for the Security Evaluation of NDEF Message Format

CICSYN '13 Proceedings of the 2013 Fifth International Conference on Computational Intelligence, Communication Systems and Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Android system is getting more and more popular on the mobile devices. Thus, lots of apps have sprung up to facilitate people's daily life. However, many of the apps are released without sufficient testing work, so the users encounter a sudden app crash now and then. This will undoubtedly impact the user's experience and even lead to economic loss. Because current testing tools on Android apps mainly focus on the motion event on the screen, like click event, bugs concerned with data handling module in an app is neglected. In this paper, we propose an automated testing method to fuzz testing the Android apps. The test targets are the Activities which accept outside MIME data. These Activities are picked out by analyzing the Intent-filter tag in the AndroidManifest.xml file. An automated fuzzing tool, DroidFuzzer, is implemented based on the method. Finally, experiments are conducted to prove the effectiveness of it.