UBCBench contains all benchmarks we designed for confirming our hypothesized findings while analyzing the three well-known static taint analysis tools, FlowDroid, Amandroid, and DroidSafe.
The master branch contains benchmarks for our extended journal paper Analyzing Android Taint Analysis Tools: FlowDroid, Amandroid, and DroidSafe published at IEEE Transactions on Software Engineering (TSE) journal. If you are looking for benchmarks used in our conference paper published at ISSTA'18 (Analyzing the analyzers: FlowDroid/IccTA, AmanDroid, and DroidSafe), please switch to the ISSTA branch.
We ran all benchmarks with the three aforementioned tools, using the same tool configurations and sources and sinks list we described in our TSE paper. We analyzed all tool analysis results and provided our analysis results, along with the ground truth in the excel file called "UBCBench Results.xlsx".
- U-DB2.12: ConservativeModel1-3
- U-DB4.15: HardCodedLocationTest
- U-DB4.16: CallbacksIntentHandling
- U-DB4.17: SetContentView
- U-DB4.18: CallbacksInFragment
- U-DB7.24: ViewCasting
- U-DB10.6: ReflectiveSource
- U-DB10.7: GetClass
- U-DB10.8: ReflectionOverloaded
- U-DB10.9: ReflectionRes
- U-DB10.10: ReflectionDynamic
- U-DB10.11: ReflectionAndroid
- U-DB10.12: GetConstructor, ReturnConstructor