4 ms·
From skimming the papers briefly* it looks it's finding errors in policy-scoping and other violations outside of expected permission branches. The thesis isn't
by forgotpwtomain 11y ago
From skimming the papers briefly* it looks it's finding errors in policy-scoping and other violations outside of expected permission branches.
The thesis isn't linked on the site but I found it here
[0] http://www.cs.berkeley.edu/~jnear/ http://www.cs.berkeley.edu/~jnear/
[1] https://dspace.mit.edu/handle/1721.1/99841 https://dspace.mit.edu/handle/1721.1/99841
- tptacek 11y agoThank you!
- ShaneWilton 11y agoI've been working through the paper for almost two hours now. I'm not an expert on static analysis, so I don't know how much of the information in here is novel, but the paper does a great job of concisely conveying a lot of interesting ideas. His model for representing data exposures is beautiful in its simplicity, and I think it could almost trivially be adapted for dynamic analysis too. Definitely worth a skim in my opinion.