English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Increasing interest in securing the Android ecosystem has spawned numerousefforts to assist app developers in building secure apps. These efforts haveresulted in tools and techniques capable of detecting vulnerabilities (andmalicious behaviors) in apps. However, there has been no evaluation of theeffectiveness of these tools and techniques in detecting known vulnerabilities.The absence of such evaluations puts app developers at a disadvantage whenchoosing security analysis tools to secure their apps. In this regard, weevaluated the effectiveness of vulnerability detection tools for Android apps.We reviewed 64 tools and empirically evaluated 14 vulnerability detection tools(incidentally along with five malicious behavior detection tools) against 42known unique vulnerabilities captured by Ghera benchmarks, which are composedof both vulnerable and secure apps. Of the 24 observations from the evaluation,the main observation is existing vulnerability detection tools for Android appsare very limited in their ability to detect known vulnerabilities -- all of theevaluated tools together could only detect 30 of the 42 known uniquevulnerabilities. More effort is required if security analysis tools are to helpdevelopers build secure apps. We hope the observations from this evaluationwill help app developers choose appropriate security analysis tools andpersuade tool developers and researchers to identify and address limitations intheir tools and techniques. We also hope this evaluation will catalyze or sparka conversation in the software engineering and security communities to requirea more rigorous and explicit evaluation of security analysis tools andtechniques.

Are Free Android App Security Analysis Tools Effective in Detecting Known Vulnerabilities?