4 ms·
Apply static code analysis to apps for guarantees like "This app access your addressbook but never sends it to the internet". Some of my ex-collegues were work
by qznc 8y ago
Apply static code analysis to apps for guarantees like "This app access your addressbook but never sends it to the internet".
Some of my ex-collegues were working on this: https://pp.ipd.kit.edu/publication.php?id=jodroid2015atps https://pp.ipd.kit.edu/publication.php?id=jodroid2015atps
Turn the research prototype into a practical tool. Hope to get acquihired by Google or Apple for their app store.
- gabcoh 8y agoThis seems like an incredibly useful and important tool. However, I think ideally a tool like this should be open source and free. edit: it seems like this groups work is open sourced actually https://pp.ipd.kit.edu/projects/joana/ https://pp.ipd.kit.edu/projects/joana/
- qznc 8y agoJoana is an open source Eclipse plugin for information flow control. Afaik the most precise one which still scales reasonably well. The core technology is not the thing to commercialize. The valuable thing is to be an independent third party which provides the guarantees. It is about image and prestige. The hard question imho: Are such guarantees valuable enough? Do end users care enough that it is worth it?
- Daishiman 8y agoIsn't this just a variant of taint analysis?