Emerging IoT programming frameworks enable building apps that compute on sensitive
data produced by smart homes and wearables. However, these frameworks only support …

Integration of third-party SDKs are essential in the development of mobile apps. However,
the rise of in-app privacy threat against mobile SDKs—called cross-library data harvesting …

Android has become the most widely used mobile operating system (OS) in recent years.
There is much research on methods for detecting malicious Android applications. Dynamic …

Information flows in Android can be effectively used to give an informative summary of an
application's behavior, showing how and for what purpose apps use specific pieces of …

Smartphones are enriched by applications (apps) available through the mobile ecosystem.
Various studies have reported that apps leaking sensitive user and device information are …

With the development of the Internet of Things, the security of embedded device has
received extensive attention. Taint analysis technology can improve the understanding of …

We present LATCH (short for Locality-Aware Taint CHecker), a generalizable architecture for
optimizing dynamic information flow tracking (DIFT). LATCH exploits the observation that …

Dynamic Taint Analysis (DTA) is a widely studied technique that can effectively detect
various attacks and information leakage. In the context of detecting information leakage, taint …

对于软件漏洞分析复杂度过高的现状问题, 本文认为其主要原因在于当前软件分析知识,
技术及数据耦合程度高, 各类知识与技术间缺乏有效编程接口连接, 因而提出了将软件漏洞分析 …