Skip to content

alvisespano/Lintent

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

21 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Lintent v1.0.7
(C) 2012-2013 Universita' Ca' Foscari di Venezia
Written by Alvise Spano'. Privilege escalation subsystem by Stefano Calzavara, Michele Bugliesi.
		
For information on Lintent please contact:
	spano at dais dot unive dot it.

Lintent is still under active development and implements a subset of
its planned features - pretty wide subset, thoguh.
We target frequent updates in the near future, when we plan to significantly
extend and revise our analyzer.
Reviewers interested in experimenting with the tool are encouraged to check
for further updates, as we will also upload upload additional case studies to
easily showcase the main features of our tool.
We also plan to deploy a Unix/Linux porting of Lintent for Mono sooner or later.


Currently supported features
	- all type reconstruction features of intents and components
	- detection of attack surfaces for privilege escalation 
	- detection of over-privileged applications
	- detection of runtime failures due to under-privilege
	- detection of type mismatches upon IPC
	- secrecy of pending intents
	- support for Java annotations for enforcing and declassifying permissions
	- integration with Android Lint
	- analysis of activities, services and broadcast receivers
	- preliminary support for Java reflection
	- preliminary support for generics and type variable constraints
	- support for Java old-style as well as post-1.5 enums
	
Forthcoming features (support planned in the next few days)
	- support for Android (bound) services

Unsupported features (support will take some more time)
	- secrecy of IBinder's

A formal description of Lintent security features is presented in the submitted paper.

About

A static code analyzer for Android.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages