Abstract:Automated input generators are widely used for large-scale dynamic analysis of mobile apps. Such input generators must constantly choose which UI element to interact with and how to interact with it, in order to achieve high coverage with a limited time budget. Currently, most input generators adopt pseudo-random or brute-force searching strategies, which may take very long to find the correct combination of inputs that can drive the app into new and important states. In this paper, we propose Humanoid, a deep learning-based approach to GUI test input generation by learning from human interactions. Our insight is that if we can learn from human-generated interaction traces, it is possible to automatically prioritize test inputs based on their importance as perceived by users. We design and implement a deep neural network model to learn how end-users would interact with an app (specifically, which UI elements to interact with and how). Our experiments showed that the interaction model can successfully prioritize user-preferred inputs for any new UI (with a top-1 accuracy of 51.2 We implemented an input generator for Android apps based on the learned model and evaluated it on both open-source apps and market apps. The results indicated that Humanoid was able to achieve higher coverage than six state-of-the-art test generators. However, further analysis showed that the learned model was not the main reason of coverage improvement. Although the learned interaction pattern could drive the app into some important GUI states with higher probabilities, it had limited effect on the width and depth of GUI state search, which is the key to improve test coverage in the long term. Whether and how human interaction patterns can be used to improve coverage is still an unknown and challenging problem.

An Automatic UI Interaction Script Generator for Android Applications Using Activity Call Graph Analysis

Dissecting Android Malware: Characterization and Evolution

APK-DFS: An Automatic Interaction System Based on Depth-First-Search for APK.

SmartDroid: an automatic system for revealing UI-based trigger conditions in android applications.

Improving dynamic analysis of android apps using hybrid test input generation

Real-Time Behavior Analysis and Identification for Android Application

Dynamic Analysis Scheme of Android Malware Based on Sandbox

Security Analysis for Android Applications Using Sensitive Path Identification

A3: Automatic Analysis of Android Malware

DynaLog: An automated dynamic analysis framework for characterizing Android applications

Humanoid: A Deep Learning-Based Approach to Automated Black-box Android App Testing.

Humanoid: A Deep Learning-based Approach to Automated Black-box Android App Testing

App in the Middle

DroidBot: A Lightweight UI-Guided Test Input Generator for Android

Automated Test Input Generation for Android: Towards Getting There in an Industrial Case.

An APP Sensitive Behaviors Detection Method Based on Android Kernel and Its Implementation

Analyzing Android Application in Real-Time at Kernel Level

A Detection Method and System Implementation for Android Malware

Automated, Dynamic Android App Vulnerability and Privacy Leak Analysis: Design Considerations, Required Components and Available Tools

AppsPlayground: automatic security analysis of smartphone applications.

Implantation of Android System based on ADB Debugging