Runtime Verification and Enforcement for Android Applications with RV-Droid

Yliès Falcone (1) , Sebastian Currea (2) , Mohamad Jaber (2)

1 VASCO - Validation de Systèmes, Composants et Objets logiciels
2 LIG - Laboratoire d'Informatique de Grenoble

RV-Droid is an implemented framework dedicated to runtime verification (RV) and runtime enforcement (RE) of Android applications. RV-Droid consists of an Android application that interacts closely with a cloud. Running RV-Droid on their devices, users can select targeted Android applications from Google Play (or a dedicated repository) and a property. The cloud hosts third-party RV tools that are used to synthesize AspectJ aspects from the property. According to the chosen RV tool and the specification, some appropriate monitoring code, the original application and the instrumentation aspect are woven together. Weaving can occur either on the user's device or in the dedicated cloud. The woven application is then retrieved and executed on the user's device and the property is runtime verified. RV-Droid is generic and currently works with two existing runtime verification frameworks for (pure) Java programs: with Java-MOP and (partially) with RuleR. RV-Droid does not require any modification to the Android kernel and targeted applications can be retrieved off-the-shelf. We carried out several experiments that demonstrated the effectiveness of RV-Droid on monitoring (security) properties.

Domaines: Génie logiciel [cs.SE]

Yliès Falcone, Sebastian Currea, Mohamad Jaber. Runtime Verification and Enforcement for Android Applications with RV-Droid. RV 2012 - 3rd International Conference on Runtime Verification, Sep 2012, Istanbul, Turkey. pp.88-95, ⟨10.1007/978-3-642-35632-2_11⟩. ⟨hal-00857292⟩