Brucker, A.D. and Herzberg, M. (Accepted: 2016) On the Static Analysis of Hybrid Mobile Apps: A Report on the State of Apache Cordova Nation. In: Caballero, J. and Bodden, E., (eds.) Engineering Secure Software and Systems. ESSoS 2016, 06-08 Apr 2016, London, UK. Lecture Notes in Computer Science, 9639 . Springer International Publishing , pp. 72-88. ISBN 978-3-642-11746-6
Abstract
Developing mobile applications is a challenging business: developers need to support multiple platforms and, at the same time, need to cope with limited resources, as the revenue generated by an average app is rather small. This results in an increasing use of cross-platform development frameworks that allow developing an app once and offering it on multiple mobile platforms such as Android, iOS, or Windows. Apache Cordova is a popular framework for developing multi-platform apps. Cordova combines HTML5 and JavaScript with native application code. Combining web and native technologies creates new security challenges as, e.g., an XSS attacker becomes more powerful. In this paper, we present a novel approach for statically analysing the foreign language calls. We evaluate our approach by analysing the top Cordova apps from Google Play. Moreover, we report on the current state of the overall quality and security of Cordova apps.
Metadata
Item Type: | Proceedings Paper |
---|---|
Authors/Creators: |
|
Editors: |
|
Copyright, Publisher and Additional Information: | © 2016 Springer International Publishing Switzerland. This is an author produced version of a paper subsequently published in Lecture Notes in Computer Science. Uploaded in accordance with the publisher's self-archiving policy. |
Dates: |
|
Institution: | The University of Sheffield |
Academic Units: | The University of Sheffield > Faculty of Engineering (Sheffield) > Department of Computer Science (Sheffield) |
Depositing User: | Symplectic Sheffield |
Date Deposited: | 23 Mar 2016 17:20 |
Last Modified: | 08 Jan 2017 22:17 |
Published Version: | http://dx.doi.org/10.1007/978-3-319-30806-7_5 |
Status: | Published |
Publisher: | Springer International Publishing |
Series Name: | Lecture Notes in Computer Science |
Refereed: | Yes |
Identification Number: | 10.1007/978-3-319-30806-7_5 |
Open Archives Initiative ID (OAI ID): | oai:eprints.whiterose.ac.uk:95551 |