Cheetah: Just-in-time taint analysis for android apps

Lisa Nguyen Quang Do, Karim Ali, Benjamin Livshits, Eric Bodden, Justin Smith, Emerson Murphy-Hill

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Current static-analysis tools are often long-running, which causes them to be sidelined into nightly build checks. As a result, developers rarely use such tools to detect bugs when writing code, because they disrupt their workflow. In this paper, we present Cheetah, a static taint analysis tool for Android apps that interleaves bug fixing and code development in the Eclipse integrated development environment. Cheetah is based on the novel concept of Just-in-Time static analysis that discovers and reports the most relevant results to the developer fast, and computes the more complex results incrementally later. Unlike traditional batch-style static-analysis tools, Cheetah causes minimal disruption to the developer's workflow. This video demo showcases the main features of Cheetah: https://www.youtube.com/watch?v=i-KQD-GTBdA.

Original languageEnglish (US)
Title of host publicationProceedings - 2017 IEEE/ACM 39th International Conference on Software Engineering Companion, ICSE-C 2017
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages39-42
Number of pages4
ISBN (Electronic)9781538615898
DOIs
StatePublished - Jun 30 2017
Event39th IEEE/ACM International Conference on Software Engineering Companion, ICSE-C 2017 - Buenos Aires, Argentina
Duration: May 20 2017May 28 2017

Publication series

NameProceedings - 2017 IEEE/ACM 39th International Conference on Software Engineering Companion, ICSE-C 2017

Conference

Conference39th IEEE/ACM International Conference on Software Engineering Companion, ICSE-C 2017
Country/TerritoryArgentina
CityBuenos Aires
Period5/20/175/28/17

Keywords

  • Cheetah
  • Just-in-Time
  • Layered analysis
  • Static analysis

ASJC Scopus subject areas

  • Software
  • Safety, Risk, Reliability and Quality

Fingerprint

Dive into the research topics of 'Cheetah: Just-in-time taint analysis for android apps'. Together they form a unique fingerprint.

Cite this