Data vulnerability detection by security testing for Android applications

摘要: The Android intent messaging is a mechanism that ties components together to build Mobile applications. Intents are kinds of messages composed actions and data, sent by component another perform several operations, e.g., launching user interface. eases the writing applications, but it might also be used as an entry point for security attacks. latter can easily with intents components, indirectly forward attacks other so on. In this context, paper proposes Model-based testing approach attempt detect data vulnerabilities in words, generates test cases check whether vulnerable attacks, through intents, expose personal data. Our method takes applications intent-based formally expressed models called vulnerability patterns. Then, originality our approach, partial specifications automatically generated from configuration files codes. Test then patterns previous specifications. A tool, APSET, presented evaluated experimentations on some