Title
Elix: Path-Selective Taint Analysis for Extracting Mobile App Links
Abstract
App links, also known as mobile deep links, are URIs that point to specific pages in an app. App links are essential to many mobile experiences: Google and Bing use them to link search results directly to relevant pages in an app and apps use them for cross-app navigation. However, app links are hard to discover and, since they must be explicitly built into apps by developers, only exist for a small fraction of apps. To address these two problems, we propose Elix, an automated app link extractor. We define link extraction as a static information flow problem where a link, with its scheme and parameters, is synthesized by analyzing the data flow between subsequent pages in an app. As static analysis is prone to false positives, Elix adopts a novel, path-selective taint analysis that leverages symbolic execution to reason about path constraints and abandon infeasible paths. Elix can automatically and correctly discover links that are exposed by an app, and many others that are not explicitly exposed, thus increasing coverage of both link-enabled apps and link-enabled pages in an app. Elix also simplifies the scheme of extracted links by reducing complex types to a minimal set of primitive types. We have implemented Elix on Android and applied it to 1007 popular Android apps. Elix can extract 80-90% of an app's links, and above 80% of the extracted links are stable.
Year
DOI
Venue
2019
10.1145/3307334.3326102
Proceedings of the 17th Annual International Conference on Mobile Systems, Applications, and Services
Keywords
Field
DocType
mobile app links, static analysis, symbolic execution
Information flow (information theory),Android (operating system),Information retrieval,Computer science,Static analysis,Taint checking,Symbolic execution,Primitive data type,Embedded system,Data flow diagram,False positive paradox
Conference
ISBN
Citations 
PageRank 
978-1-4503-6661-8
1
0.35
References 
Authors
0
4
Name
Order
Citations
PageRank
Yongjian Hu150230.74
Riva265439.32
Suman Nath32907164.98
Iulian Neamtiu4174182.96