Static Taint Analysis Applied to Detecting Bad Programming Practices in Android
Gonzalo Winniczuk, Sergio Yovine · El Servicio de Difusión de la Creación Intelectual (National University of La Plata) · 2017
Frameworks and Application Programming Interfaces (API) usually come along with a set of guidelines that establish good programming practices in order to avoid pitfalls which could lead, at least, to bad user experiences, and at most, to program crashes. Most often than not, such guidelines are not at all enforced by IDEs. This work investigates whether static taint analysis could be effectively used for automatically detecting bad programming patterns in Android applications. It presents the implemented tool, called CheckDroid, together with the preliminary experimental evaluation carried out.