Static Analysis of Mobile Programs

Abstract : The goal of the STAMP (STatic Analysis of Mobile Programs) project has been to build tools for proving the absence of malware in Android applications, also known as apps. The performers focus is on guarantees, their techniques have a large static component, as static proofs are the only known method of reasoning about all possible program executions. Like most systems written in modern languages, Android applications heavily use pointer data structures, complex path conditions, and multiple layers of object-oriented abstractions. Stanford's hypothesis has been that static analysis techniques have reached the point that sound, precise and scalable static analysis for interesting security properties is entirely feasible.