Justgen: Effective test generation for unspecified JNI behaviors on jvms

S Hwang, S Lee, J Kim, S Ryu - 2021 IEEE/ACM 43rd …, 2021 - ieeexplore.ieee.org
Java Native Interface (JNI) provides a way for Java applications to access native libraries,
but it is difficult to develop correct JNI programs. By leveraging native code, the JNI enables …

Identifying java calls in native code via binary scanning

G Fourtounis, L Triantafyllou… - Proceedings of the 29th …, 2020 - dl.acm.org
Current Java static analyzers, operating either on the source or bytecode level, exhibit
unsoundness for programs that contain native code. We show that the Java Native Interface …

A systematic study of android non-sdk (hidden) service api security

Y He, Y Gu, P Su, K Sun, Y Zhou… - IEEE Transactions on …, 2022 - ieeexplore.ieee.org
Android allows apps to communicate with its system services via system service helpers so
that these apps can use various functions provided by the system services. Meanwhile, the …

When program analysis meets bytecode search: Targeted and efficient inter-procedural analysis of modern Android apps in BackDroid

D Wu, D Gao, RH Deng, CR KC - 2021 51st Annual IEEE/IFIP …, 2021 - ieeexplore.ieee.org
Widely-used Android static program analysis tools, eg, Amandroid and FlowDroid, perform
the whole-app inter-procedural analysis that is comprehensive but fundamentally difficult to …

Exploit the last straw that breaks android systems

L Zhang, K Lian, H **ao, Z Zhang, P Liu… - … IEEE Symposium on …, 2022 - ieeexplore.ieee.org
The Android system services usually play a critical role in running multiple important tasks,
and delivering seamless user experiences, eg, conveniently storing user data. In this paper …

Reach me if you can: On native vulnerability reachability in android apps

L Borzacchiello, E Coppa, D Maiorca… - … on Research in …, 2022 - Springer
Android applications ship with several native C/C++ libraries. Research on Android security
has revealed that these libraries often come from third-party components that are not kept up …

An Empirical Study of JVMs' Behaviors on Erroneous JNI Interoperations

S Hwang, S Lee, S Ryu - IEEE Transactions on Software …, 2024 - ieeexplore.ieee.org
Java Native Interface (JNI) allows Java applications to access native libraries, but it is
challenging to develop correct JNI programs. By leveraging native code, the JNI enables …

JNI global references are still vulnerable: Attacks and defenses

Y He, Y Zhou, Y Zhou, Q Li, K Sun… - IEEE Transactions on …, 2020 - ieeexplore.ieee.org
System services and resources in Android are accessed through IPC-based mechanisms.
Previous research has demonstrated that they are vulnerable to the denial-of-service attack …

[PDF][PDF] Interactive Cross-Language Pointer Analysis For Resolving Native Code in Java Programs

C Zhang, Y Liang, T Tan, C Xu, S Kan, Y Sui, Y Li - cs.nju.edu.cn
Java offers the Java Native Interface (JNI), which allows programs running in the Java
Virtual Machine to invoke and be manipulated by native applications and libraries written in …

Unix Domain Sockets Applied in Android Malware Should Not Be Ignored

X Jiang, D Mu, H Zhang - Information, 2018 - mdpi.com
Increasingly, malicious Android apps use various methods to steal private user data without
their knowledge. Detecting the leakage of private data is the focus of mobile information …