-
Notifications
You must be signed in to change notification settings - Fork 1
A static code analyzer for Android.
License
alvisespano/Lintent
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
Lintent v1.0.7 (C) 2012-2013 Universita' Ca' Foscari di Venezia Written by Alvise Spano'. Privilege escalation subsystem by Stefano Calzavara, Michele Bugliesi. For information on Lintent please contact: spano at dais dot unive dot it. Lintent is still under active development and implements a subset of its planned features - pretty wide subset, thoguh. We target frequent updates in the near future, when we plan to significantly extend and revise our analyzer. Reviewers interested in experimenting with the tool are encouraged to check for further updates, as we will also upload upload additional case studies to easily showcase the main features of our tool. We also plan to deploy a Unix/Linux porting of Lintent for Mono sooner or later. Currently supported features - all type reconstruction features of intents and components - detection of attack surfaces for privilege escalation - detection of over-privileged applications - detection of runtime failures due to under-privilege - detection of type mismatches upon IPC - secrecy of pending intents - support for Java annotations for enforcing and declassifying permissions - integration with Android Lint - analysis of activities, services and broadcast receivers - preliminary support for Java reflection - preliminary support for generics and type variable constraints - support for Java old-style as well as post-1.5 enums Forthcoming features (support planned in the next few days) - support for Android (bound) services Unsupported features (support will take some more time) - secrecy of IBinder's A formal description of Lintent security features is presented in the submitted paper.
About
A static code analyzer for Android.
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published