DASCA combines dynamic and static techniques for analysing code for finding security (i.e., vulnerabilities), safety, or reliability problems.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 

57 lines
2.5 KiB

  1. To cite the analysis of hybrid Android Applications (e.g., using Cordova
  2. or SAP Kapsel), please use
  3. Achim D. Brucker and Michael Herzberg. On the Static Analysis of
  4. Hybrid Mobile Apps: A Report on the State of Apache Cordova
  5. Nation. In International Symposium on Engineering Secure Software
  6. and Systems (ESSoS). Lecture Notes in Computer Science (9639), pages
  7. 72-88, Springer-Verlag, 2016. doi: :10.1007/978-3-319-30806-7_5
  8. A BibTeX entry for LaTeX users is
  9. @InCollection{ brucker.ea:cordova-security:2016,
  10. author = {Achim D. Brucker and Michael Herzberg},
  11. booktitle = {International Symposium on Engineering Secure Software and
  12. Systems (ESSoS)},
  13. language = {USenglish},
  14. editor = {Juan Caballero and Eric Bodden},
  15. publisher = {Springer-Verlag},
  16. pages = {72--88},
  17. talk = {talk:brucker.ea:cordova-security:2016},
  18. address = {Heidelberg},
  19. series = {Lecture Notes in Computer Science},
  20. number = {9639},
  21. title = {On the Static Analysis of Hybrid Mobile Apps: A Report on
  22. the State of Apache Cordova Nation},
  23. year = {2016},
  24. isbn = {978-3-642-11746-6},
  25. classification= {conference},
  26. areas = {security, software},
  27. public = {yes},
  28. doi = {10.1007/978-3-319-30806-7_5},
  29. pdf = {https://www.brucker.ch/bibliography/download/2016/brucker.ea-cordova-security-2016.pdf},
  30. abstract = {Developing mobile applications is a challenging business:
  31. developers need to support multiple platforms and, at the
  32. same time, need to cope with limited resources, as the
  33. revenue generated by an average app is rather small. This
  34. results in an increasing use of cross-platform development
  35. frameworks that allow developing an app once and offering
  36. it on multiple mobile platforms such as Android, iOS, or
  37. Windows.
  38. Apache Cordova is a popular framework for developing
  39. multi-platform apps. Cordova combines HTML5 and JavaScript
  40. with native application code. Combining web and native
  41. technologies creates new security challenges as, e.g., an
  42. XSS attacker becomes more powerful.
  43. In this paper, we present a novel approach for statically
  44. analysing the foreign language calls. We evaluate our
  45. approach by analysing the top Cordova apps from Google
  46. Play. Moreover, we report on the current state of the
  47. overall quality and security of Cordova apps. },
  48. keywords = {static program analysis, static application security
  49. testing, Android, Cordova, hybrid mobile apps},
  50. url = {https://www.brucker.ch/bibliography/abstract/brucker.ea-cordova-security-2016}
  51. }