Skip to content
Precise Intent Matcher
Java Shell Batchfile
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

Java 8



The Precise Intent Matcher (PIM) can be used as an alternative or a replacement for the CONNECT operator of the AQL. It connects Intent-Sinks with Intent-Sources and thereby detects ICC and IAC flows between one or more apps. To do so, it builds up a client-server connection with an Android device or emulator. Through this connection PIM request the construction of Intents and Intent-Filters based on the provided input (Intent-Sinks & -Sources). Whenever the Android system installed on the device or emulator decides, that an Intent's action-category-data triple matches the one of an Intent-Filter, a connection between the associated Intent-Sink and -Source is derived. Accordingly PIM takes multiple AQL-Answers as input and outputs a single one.


The goal of the following query, for example, is to find any flows inside and between A and B.

	Flows IN App(’A.apk’) ?,
	IntentSources IN App(’A.apk’) ?,
	IntentSinks IN App(’A.apk’) ?,
	Flows IN App(’B.apk’) ?,
	IntentSources IN App(’B.apk’) ?,
	IntentSinks IN App(’B.apk’) ?

The MATCH operator refers to PIM. The questions in its scope may be answered by different tools such as FlowDroid or IC3. A complete and fully described example can be found in the referenced paper (see Publications).

Configuration and Launch Parameters

When PIM is executed for the first time, you are asked to setup PIM unless you have defined the following parameters in the file beforehand:

Entry Meaning
sdkPath=/path/to/Android/Android/sdk Path to the Android SDK. The Android development bridge located in this directory will be called.
deviceName=emulatorToBeUsed Specify the name of the emulator or device you want to execute PIM on.
rebootAllowed=false Determines if PIM has the permission to restart the selected device.
appRelocationPath=/search/path Provide a directory where the analyzed apps may be found. For example, the upload directory of an AQL-WebService.

The following launch parameters can be provided while running PIM:

Parameter Meaning
start Starts the selected emulator or device and the PIM-Server on it.
stop Stops the selected emulator or device.
ask %ANSWER% [, %ANSWER%]* All provided AQL-Answers (%ANSWER%) will be matched by PIM. At least one answer must be specified. (If the PIM-Server is not started, it will be started and stopped once the execution finishes.)


  • Together Strong: Cooperative Android App Analysis (Felix Pauck, Heike Wehrheim)


PIM is licensed under the GNU General Public License v3 (see LICENSE).


Felix Pauck (FoelliX)
Paderborn University


You can’t perform that action at this time.