DRFuzzer: Detector of Android APP inter-component vulnerability

摘要

In recent years, the Android system developed rapidly. It has become the leader of the smart phone operating system. The research of Android security mechanisms is significant. If an Android application could not protect its private components well in the process of inter-application communication, there would exist exposed component vulnerabilities. The current vulnerability detection methods cannot identify such vulnerabilities accurately. To solve this problem, we propose a new method combines Fuzzing with custom Android OS and design a vulnerability mining tool named DRFuzzer. Experimental results show that the tool can effective and comprehensive discover vulnerabilities in communication between components, and provide possibility for solving some deep problems.