Open Access iconOpen Access

ARTICLE

crossmark

BArcherFuzzer: An Android System Services Fuzzier via Transaction Dependencies of BpBinder

Jiawei Qin1,2, Hua Zhang1,*, Hanbing Yan2, Tian Zhu2, Song Hu1, Dingyu Yan2

1 The State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, 100080, China
2 The National Computer Network Emergency Response Technical Team/Coordination Center of China, Beijing, 100012, China

* Corresponding Author: Hua Zhang. Email: email

(This article belongs to the Special Issue: AI Powered Human-centric Computing with Cloud/Fog/Edge)

Intelligent Automation & Soft Computing 2024, 39(3), 527-544. https://doi.org/10.32604/iasc.2024.047509

Abstract

By the analysis of vulnerabilities of Android native system services, we find that some vulnerabilities are caused by inconsistent data transmission and inconsistent data processing logic between client and server. The existing research cannot find the above two types of vulnerabilities and the test cases of them face the problem of low coverage. In this paper, we propose an extraction method of test cases based on the native system services of the client and design a case construction method that supports multi-parameter mutation based on genetic algorithm and priority strategy. Based on the above method, we implement a detection tool-BArcherFuzzer to detect vulnerabilities of Android native system services. The experiment results show that BArcherFuzzer found four vulnerabilities of hundreds of exception messages, all of them were confirmed by Google and one was assigned a Common Vulnerabilities and Exposures (CVE) number (CVE-2020-0363).

Keywords


Cite This Article

APA Style
Qin, J., Zhang, H., Yan, H., Zhu, T., Hu, S. et al. (2024). Barcherfuzzer: an android system services fuzzier via transaction dependencies of bpbinder. Intelligent Automation & Soft Computing, 39(3), 527-544. https://doi.org/10.32604/iasc.2024.047509
Vancouver Style
Qin J, Zhang H, Yan H, Zhu T, Hu S, Yan D. Barcherfuzzer: an android system services fuzzier via transaction dependencies of bpbinder. Intell Automat Soft Comput . 2024;39(3):527-544 https://doi.org/10.32604/iasc.2024.047509
IEEE Style
J. Qin, H. Zhang, H. Yan, T. Zhu, S. Hu, and D. Yan "BArcherFuzzer: An Android System Services Fuzzier via Transaction Dependencies of BpBinder," Intell. Automat. Soft Comput. , vol. 39, no. 3, pp. 527-544. 2024. https://doi.org/10.32604/iasc.2024.047509



cc Copyright © 2024 The Author(s). Published by Tech Science Press.
This work is licensed under a Creative Commons Attribution 4.0 International License , which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
  • 767

    View

  • 245

    Download

  • 0

    Like

Share Link