Checking Conformance of Applications against GUI Policies
Fri 27 Aug 2021 07:20 - 07:30 - Testing—Mobile Analysis and Testing Chair(s): Wei Yang
A good graphical user interface (GUI) is crucial for an application's usability,
so vendors and regulatory agencies increasingly place restrictions on how GUI
elements should appear to and interact with users. Motivated by this concern,
this paper presents a new technique (based on static analysis) for checking
conformance between (Android) applications and GUI policies expressed in a
formal specification language. In particular, this paper (1) describes a
specification language for formalizing GUI policies, (2) proposes a new
program abstraction called an event-driven layout forest, and (3) describes
a static analysis for constructing this abstraction and checking it against a
GUI policy. We have implemented the proposed approach in a tool called
Venus, and we evaluate it on 2361 Android
applications and 17 policies. Our
evaluation shows that Venus can uncover malicious applications that perform
ad fraud and identify violations of GUI design guidelines and GDPR
laws.
Thu 26 AugDisplayed time zone: Athens change
19:00 - 20:00 | Testing—Mobile Analysis and TestingResearch Papers +12h Chair(s): Fabrizio Pastore University of Luxembourg | ||
19:00 10mPaper | Algebraic-Datatype Taint Tracking, with Applications to Understanding Android Identifier Leaks Research Papers Sydur Rahaman New Jersey Institute of Technology, Iulian Neamtiu New Jersey Institute of Technology, Xin Yin New Jersey Institute of Technology DOI | ||
19:10 10mPaper | Vet: Identifying and Avoiding UI Exploration TarpitsDistinguished Paper Award Research Papers Wenyu Wang University of Illinois at Urbana-Champaign, Wei Yang University of Texas at Dallas, Tianyin Xu University of Illinois at Urbana-Champaign, Tao Xie Peking University Link to publication DOI Media Attached | ||
19:20 10mPaper | Checking Conformance of Applications against GUI Policies Research Papers Zhen Zhang University of Washington, Yu Feng University of California at Santa Barbara, Michael D. Ernst University of Washington, Sebastian Porst Google, Işıl Dillig University of Texas at Austin DOI | ||
19:30 30mLive Q&A | Q&A (Testing—Mobile Analysis and Testing) Research Papers | ||
Fri 27 AugDisplayed time zone: Athens change
07:00 - 08:00 | |||
07:00 10mPaper | Algebraic-Datatype Taint Tracking, with Applications to Understanding Android Identifier Leaks Research Papers Sydur Rahaman New Jersey Institute of Technology, Iulian Neamtiu New Jersey Institute of Technology, Xin Yin New Jersey Institute of Technology DOI | ||
07:10 10mPaper | Vet: Identifying and Avoiding UI Exploration TarpitsDistinguished Paper Award Research Papers Wenyu Wang University of Illinois at Urbana-Champaign, Wei Yang University of Texas at Dallas, Tianyin Xu University of Illinois at Urbana-Champaign, Tao Xie Peking University Link to publication DOI Media Attached | ||
07:20 10mPaper | Checking Conformance of Applications against GUI Policies Research Papers Zhen Zhang University of Washington, Yu Feng University of California at Santa Barbara, Michael D. Ernst University of Washington, Sebastian Porst Google, Işıl Dillig University of Texas at Austin DOI | ||
07:30 30mLive Q&A | Q&A (Testing—Mobile Analysis and Testing) Research Papers | ||