Reproduce “Beyond Sensitive APIs: Detecting Access Control Flaws at Sensitive Callsites in Android Firmware” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Haotian Deng, Meng Hao, Hanxiao Chen, Xinyuan Qian, Guowen Xu, Hongwei Li, Chaoshun Zuo
Callix detects context-sensitive vulnerabilities in pre-installed Android apps by assessing operations, affected data, and access checks together. It analyzes externally accessible ContentProviders across 50 firmware images from 10 vendors, reporting 819 paths across 424 providers. Of these, 345 (42.1%) involve database manipulation of user-private data; a random sample of 492 paths yielded 95.1% precision.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.