SACH: A tool for assisting Secure Android application development

Aakiel Abernathy, Xiaohong Yuan, Edward Hill, Jinsheng Xu, Kelvin Bryant, Kenneth Williams

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

To mitigate the risk of attacks to mobile applications, it is important for mobile application developers to develop secure mobile applications. There have been tools that statically analyze the mobile applications to determine whether there are data leakage or access control vulnerabilities The Software Engineering Institute at Carnegie Melon University published CERT Java secure coding rules applicable to developing android applications. This paper describes SACH (Secure Android Coding Helper) - a tool we implemented to help developers identify security vulnerabilities in Android application. The tool analyzes Android application source code to detect violations of CERT Java secure coding rules. This tool will help Android developers to write Android code that comply with CERT Java secure coding rules. It can also be used in the classroom to teach students about Android secure coding.

Original languageEnglish
Title of host publicationIEEE SoutheastCon 2017
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781538615393
DOIs
StatePublished - May 10 2017
Externally publishedYes
EventIEEE SoutheastCon 2017 - Charlotte, United States
Duration: Mar 30 2017Apr 2 2017

Publication series

NameConference Proceedings - IEEE SOUTHEASTCON
Volume0
ISSN (Print)1091-0050
ISSN (Electronic)1558-058X

Conference

ConferenceIEEE SoutheastCon 2017
Country/TerritoryUnited States
CityCharlotte
Period03/30/1704/2/17

Keywords

  • Android application development
  • CERT Java secure coding rules
  • Secure coding

Fingerprint

Dive into the research topics of 'SACH: A tool for assisting Secure Android application development'. Together they form a unique fingerprint.

Cite this