LaChouTi: kernel vulnerability responding framework for the fragmented Android devices

摘要: The most criticized problem in the Android ecosystem is fragmentation, i.e., 24,093 devices wild are made by 1,294 manufacturers and installed with extremely customized operating systems. existence of so many different active versions makes security updates vulnerability responses across whole range difficult. In this paper, we seek to respond unpatched kernel vulnerabilities for fragmented devices. Specifically, propose implement LaChouTi, which an automated update framework consisting cloud service end application update. LaChouTi first tracks identifies exposed according CVE-Patch map target kernels. Then, it generates differential binary patches identified results. Finally, pushes applies We evaluate using 12 Nexus that have versions, series manufacturers, find 1922 these results show that: (1) risk caused fragmentation serious; (2) proposed effective responding such risk. on new commercial collaborating four internationally renowned manufacturers. demonstrate manufacturers'security updates.