Ghera: A Repository of Android App Vulnerability Benchmarks

摘要: Security of mobile apps affects the security their users. This has fueled development techniques to automatically detect vulnerabilities in and help developers secure apps; specifically, context Android platform due openness ubiquitousness platform. Despite a slew research efforts this space, there is no comprehensive repository up-to-date lean benchmarks that contain most known app and, consequently, can be used rigorously evaluate both existing new vulnerability detection learn about vulnerabilities. In paper, we describe Ghera, an open source capture 25 (as pairs exploited/benign exploiting/malicious apps). We also present desirable characteristics repositories uncovered while creating Ghera.