Giter Club home page Giter Club logo

droidsafe-src's Introduction

Overview

The DroidSafe project develops novel program analysis techniques to diagnose and remove malicious code from Android mobile applications. The DroidSafe project is developed by MIT's Center for Resilient Software and the Kestrel Institute. The core of our system is a static information-flow analysis that operates on either Java bytecode for an application or an application's APK. The DroidSafe team co-designed a semantic model of Android runtime behaviors and a static information-flow analysis to achieve acceptable precision, accuracy, and scalability for real-world Android applications.

Setup

Directory Structure

  • android-apps
    • Example applications and Makefiles to simplify analysis runs
  • android-lib
    • Libraries for applications to use to accomplish particular tasks.
  • bin
    • Packages and Executables of DroidSafe tool.
  • config-files
    • Configuration files for the main DroidSafe tool including logging.
  • doc
    • Documents
  • lib
    • External libraries needed by the main DroidSafe tool.
  • Modeling
    • Current and old source code for Android semantic model.
  • src
    • Source code for main DroidSafe analyses
  • tools
    • Various non-DroidSafe tools to aid in malware detection and DroidSafe implementation.

droidsafe-src's People

Contributors

acoglio avatar bob-jacobs-jr avatar dkim avatar dpetters avatar gilham avatar madberries avatar marcel-becker avatar mgordon avatar ppiselli avatar rfrench-giti avatar rmarsh-giti avatar uwinsoftware avatar wesleypeck avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

droidsafe-src's Issues

there is no scripts/build.xml

when i want to install the plugin in eclipse when i use the ant plugin-deploy the result is as the following:

build:
[java] Buildfile: /scripts/build.xml
[java]
[java] BUILD FAILED
[java] Buildfile: /scripts/build.xml does not exist
[java]
[java] Total time: 0 seconds
[java] An error has occurred. See the log file
[java] /home/hit_alan/workspace/.metadata/.log.

BUILD FAILED
/home/hit_alan/softwares/Droidsafe/droidsafe-src/build.xml:543: The following error occurred while executing this line:
/home/hit_alan/softwares/Droidsafe/droidsafe-src/src/eclipse/build-plugin.xml:87: Java returned: 13

Error 255

Hi Gordon,

Currently i'm working with Droidsafe as part of my PhD thesis. I'm having some issues running your tool with some apk's. In particular i'm getting 'Error 255' when running Droidsafe.

I'm trying to run Droidsafe with this apk file (please, it is a malware sample proceed with care).
This is the log of Droidsafe execution, as i said it ends with Error 255.

Thank You

Makefile:4: *** DROIDSAFE_SRC_HOME is undefined. Stop.

Hello

Please help, when I run the Droidsafe static analyzer on the Android APK using make command " make specdump-apk " I got the following error

Makefile:4: *** DROIDSAFE_SRC_HOME is undefined. Stop.
hanoy@hanoy-VirtualBox:~/DROIDSAFE_SRC_HOME/android-apps/examples/PickContacts_apk$ make specdump-apk

Build failed "Could not find resource file droidcalls.jar"

Hello all,

I'm trying to install droidsafe according to the WIKI. When I issue ant compile, I can see the builds completes, but with 46 errors. (See example below)

[exec] symbol: variable PendingIntent
[exec] location: class DroidSafeCalls
[exec] edu/mit/csail/droidsafe/DroidSafeCalls.java:132: error: cannot find symbol
[exec] context.startActivity (new Intent (context, activityClass));

I'm trying to install the eclipse plugin in macOS. When I run ant plugin-deploy I get the message Could not find resource file droidcalls.jar (along with the 46 errors above) and the build fails. How do I solve this issue?

Source code

Hi. I was wondering... where can one find the source?

Analysis does not complete

Hi,

I have been tried to run droidsafe from the command line on a set of benchmarks. Initially I found out that droidsafe throws an error when I run the tool against the apk files that I have. This was because droidsafe is using an older version of apktool. The older version was failing to decompile my apk files. So I update the apktool version. After updating apktool I ran droidsafe on one of the apk files in my benchmark. However, now I see that the analysis does not complete. I let it run for well over ten minutes but it gets stuck at "Starting Generate RCFG...". Can you tell me what is wrong?

Higher API version support ?

Hi Team,

Is it possible to extend the droidsafe Android API 19 version support to higher version ?

I am doing a android app project and want to utilize this tools for analysis. It will good if you can atleast support 20v.

Thanks in advance.

Sent from my iPhone

Insufficient Memory

Hi,

I ran droidsafe on an AWS Memory Optimized instance with 244GBs of memory. I followed the documented instructions in the Wiki on a real-world application and it failed due to insufficient amounts of memory. I have no problems running and completing the PickContact test.

How much resources is deemed sufficient for analysis of a reasonably sized app?

WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.OrderedMetadataField
WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.internal.a
WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.internal.d
WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.internal.e
WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.internal.h
WARN: Error in soot hierarchy. Interface found where class excepted: com.google.android.gms.drive.metadata.internal.j
No context: 969
Info: Not accounting for newInstance(String) calls.
Setting memory size to 240GB
make: *** [specdump-apk] Error 247

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.