Beyond Sensitive APIs: Detecting Access Control Flaws at Sensitive Callsites in Android Firmware

Haotian Deng, Meng Hao, Hanxiao Chen +4

Existing studies of vulnerable pre-installed Android apps identify dangerous behavior by checking whether an app invokes an API from a predefined set of security-sensitive APIs. Th…