Reproducible Interference-Aware Mobile Testing

Xiong, Weilun; Chen, Shihao; Zhang, Yuning; Xia, Mingyuan; Qi, Zhengwei

doi:10.1109/icsme.2018.00013

Cited by 6 publications

(3 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Caiipa is able to simulate a variety of contexts observed in the wild including diverse network-related factors, for example, the throughput and loss rates observed for Wi-Fi and 3G networks. Similarly, JazzDroid [38] is an automated fuzzer which injects into applications various environmental interferences, such as network delays, network traffic interference and HTTP requests manipulation. While these tools address a variety of bugs, they are not specialized to connectivity issues.…”

Section: Related Workmentioning

confidence: 99%

Detecting Connectivity Issues in Android Apps

Mazuera-Rozo

Escobar‐Velásquez

Espitia-Acero

et al. 2022

2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)

View full text Add to dashboard Cite

Android is the most popular mobile operating system in the world, running on more than 70% of mobile devices. This implies a gigantic and very competitive market for Android apps. Being successful in such a market is far from trivial and requires, besides the tackling of a problem or need felt by a vast audience, the development of high-quality apps. As recently showed in the literature, connectivity issues (e.g., mishandling of zero/unreliable Internet connection) can result in bugs and/or crashes, negatively affecting the app's user experience. While these issues have been studied in the literature, there are no techniques able to automatically detect and report them to developers. We present CONAN, a tool able to detect statically 16 types of connectivity issues affecting Android apps. We assessed the ability of CONAN to precisely identify these issues in a set of 44 open source apps, observing an average precision of 80%. Then, we studied the relevance of these issues for developers by (i) conducting interviews with six practitioners working with commercial Android apps, and (ii) submitting 84 issue reports for 27 open source apps. Our results show that several of the identified connectivity issues are considered as relevant by practitioners in specific contexts, in which connectivity is considered a first-class feature.

show abstract

Section: Related Workmentioning

confidence: 99%

Detecting Connectivity Issues in Android Apps

Mazuera-Rozo

Escobar‐Velásquez

Espitia-Acero

et al. 2022

2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)

View full text Add to dashboard Cite

show abstract

“…In addition, JazzDroid [91] is an automated fuzzer for Android platforms taking a gray-box approach which injects into applications various environmental interference, such as network delays, thus identifying issues related, but not limited to, connectivity. More in general, there exist approaches to test and diagnose common poor responsiveness behaviours, such as Monkey [92], AppSPIN [93], TRIAN-GLE [94] and the one proposed by Yang et al [95] can test Android applications in eventual connectivity scenarios.…”

Section: Related Workmentioning

confidence: 99%

Studying Eventual Connectivity Issues in Android Apps

Escobar-Velásquez,

Mazuera-Rozo,

Bedoya

et al. 2021

Preprint

View full text Add to dashboard Cite

Mobile apps have become indispensable for daily life, not only for individuals but also for companies/organizations that offer their services digitally. Inherited by the mobility of devices, there are no limitations regarding the locations or conditions in which apps are being used. For example, apps can be used where no internet connection is available. Therefore, offline-first is a highly desired quality of mobile apps. Accordingly, inappropriate handling of connectivity issues and miss-implementation of good practices lead to bugs and crashes occurrences that reduce the confidence of users on the apps' quality. In this paper, we present the first study on Eventual Connectivity (ECn) issues exhibited by Android apps, by manually inspecting 971 scenarios related to 50 open-source apps. We found 304 instances of ECn issues (6 issues per app, on average) that we organized in a taxonomy of 10 categories. We found that the majority of ECn issues are related to the use of messages not providing correct information to the user about the connectivity status and to the improper use of external libraries/apps to which

show abstract

“…For HTTP, much code involved in network processing in apps make it difficult to locate key hooking objects, and we found that it was easier to capture network packages by means of a middleman agent. Another similar work is JazzDroid [18], an automated Android gray-box fuzzer that injects into applications various environmental interference on the fly to detect issues. It contains a network issues injector interposes on the HTTP requests from apps and manipulates their responses to simulate network delay and connectivity.…”

Section: Background a Network-based Fuzzing On Android Applicationsmentioning

confidence: 99%

Fuzzing the Android Applications With HTTP/HTTPS Network Data

et al. 2019

View full text Add to dashboard Cite

Nowadays, the number of mobile netizens continues to grow, mobile life continues to infiltrate people's lives. Mobile applications play an increasingly important role in major industries (financial consumption, travel, education, and entertainment). High dependence and complexity make network communication become an important attack surface of mobile applications. How to quickly and efficiently discover security threats in the process of network interaction has become an urgent problem. This paper proposed a test method based on network packets fuzzing for Android applications. The scheme uses middleman technology to obtain the interaction data sent by servers to applications, adopts different mutation strategies to mutate the original data of different types, returns the mutated response data to applications, uses log monitoring technology to monitor crash information, thereby discovers potential security threats. 10 popular applications were tested based on the proposed method, and four kinds of problems were discovered. The problems contain unresponsiveness, crashes caused by JSON data exception, HTML content replacement, and URL redirection. The results indicated that the proposed method was effective in exposing bugs of mobile applications in the process of network data interaction.INDEX TERMS Android applications, Fuzzing, HTTP/HTTPS, network data.

show abstract

Reproducible Interference-Aware Mobile Testing

Cited by 6 publications

References 26 publications

Detecting Connectivity Issues in Android Apps

Detecting Connectivity Issues in Android Apps

Studying Eventual Connectivity Issues in Android Apps

Fuzzing the Android Applications With HTTP/HTTPS Network Data

Contact Info

Product

Resources

About