Smart City and Informatization by Unknown

Author:Unknown
Language: eng
Format: epub
ISBN: 9789811513015
Publisher: Springer Singapore

Study

173

41%

89%

Communication

68

47%

95.6%

Map

237

35.4%

95.7%

System

11

72.7%

100%

Security

79

36.7%

88.6%

Table 7 shows the results of automated-trigger rate of sensitive paths. For those 45 samples tested successfully before, the trigger rate of automatically detecting sensitive paths with ADS-SA reaches over 87%. However, the trigger rate of Monkey test is mostly below 47.8%. This indicates that ADS-SA is more efficient than Monkey test in automated trigger of sensitive paths.

To sum up, we design two sets of test experiments to analyze the rate of success of ADS-SA. Both two sets of experiments achieves high rate of success, proving the versatility of ADS-SA. For the number of sensitive paths detected, combined with manual analysis, static analysis and Monkey test, this paper makes a comparative analysis. The analysis results verify the reliability, accuracy and validity of ADS-SA. However, for samples “Camera” and “Paint” in Fig. 4(a), sensitive paths detected by ADS-SA are three less than that detected by manual analysis. The reason is that for protecting the security of test machine, ADS-SA evades the opening of user-sensitive privileges and cannot invoke API related to privileges. Figure 4(b) shows that sensitive paths detected by static analysis is two more than that detected by manual analysis. In order to find out the reason, we conduct code review and find that there are false alarms when static analysis detects sensitive paths. Static analysis incorrectly regards sensitive APIs that have been commented out in source codes of samples as normal sensitive APIs. However, sensitive paths containing these sensitive APIs are no longer operational. In addition, samples of “communication” type in Fig. 4(c) needs to interact with a remote server during the test. If the remote server closes abnormally, samples cannot establish the reliable communication link, resulting in reduction of the number of sensitive paths detected. For testing trigger rate of sensitive paths, experimental results show that ADS-SA automatically triggers more sensitive paths than Monkey and achieves a higher trigger rate. This verifies the effectiveness of ADS-SA.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.