---
res:
  bibo_abstract:
  - 'Due to the lack of established real-world benchmark suites for static taint analyses
    of Android applications, evaluations of these analyses are often restricted and
    hard to compare. Even in evaluations that do use real-world apps, details about
    the ground truth in those apps are rarely documented, which makes it difficult
    to compare and reproduce the results. To push Android taint analysis research
    forward, this paper thus recommends criteria for constructing real-world benchmark
    suites for this specific domain, and presents TaintBench, the first real-world
    malware benchmark suite with documented taint flows. TaintBench benchmark apps
    include taint flows with complex structures, and addresses static challenges that
    are commonly agreed on by the community. Together with the TaintBench suite, we
    introduce the TaintBench framework, whose goal is to simplify real-world benchmarking
    of Android taint analyses. First, a usability test shows that the framework improves
    experts’ performance and perceived usability when documenting and inspecting taint
    flows. Second, experiments using TaintBench reveal new insights for the taint
    analysis tools Amandroid and FlowDroid: (i) They are less effective on real-world
    malware apps than on synthetic benchmark apps. (ii) Predefined lists of sources
    and sinks heavily impact the tools’ accuracy. (iii) Surprisingly, up-to-date versions
    of both tools are less accurate than their predecessors.@eng'
  bibo_authorlist:
  - foaf_Person:
      foaf_givenName: Linghui
      foaf_name: Luo, Linghui
      foaf_surname: Luo
  - foaf_Person:
      foaf_givenName: Felix
      foaf_name: Pauck, Felix
      foaf_surname: Pauck
      foaf_workInfoHomepage: http://www.librecat.org/personId=22398
  - foaf_Person:
      foaf_givenName: Goran
      foaf_name: Piskachev, Goran
      foaf_surname: Piskachev
      foaf_workInfoHomepage: http://www.librecat.org/personId=41936
    orcid: 0000-0003-4424-5838
  - foaf_Person:
      foaf_givenName: Manuel
      foaf_name: Benz, Manuel
      foaf_surname: Benz
  - foaf_Person:
      foaf_givenName: Ivan
      foaf_name: Pashchenko, Ivan
      foaf_surname: Pashchenko
  - foaf_Person:
      foaf_givenName: Martin
      foaf_name: Mory, Martin
      foaf_surname: Mory
      foaf_workInfoHomepage: http://www.librecat.org/personId=65667
    orcid: 0000-0001-5609-0031
  - foaf_Person:
      foaf_givenName: Eric
      foaf_name: Bodden, Eric
      foaf_surname: Bodden
      foaf_workInfoHomepage: http://www.librecat.org/personId=59256
    orcid: 0000-0003-3470-3647
  - foaf_Person:
      foaf_givenName: Ben
      foaf_name: Hermann, Ben
      foaf_surname: Hermann
      foaf_workInfoHomepage: http://www.librecat.org/personId=66173
    orcid: 0000-0001-9848-2017
  - foaf_Person:
      foaf_givenName: Fabio
      foaf_name: Massacci, Fabio
      foaf_surname: Massacci
  bibo_doi: 10.1007/s10664-021-10013-5
  dct_date: 2021^xs_gYear
  dct_isPartOf:
  - http://id.crossref.org/issn/1382-3256
  - http://id.crossref.org/issn/1573-7616
  dct_language: eng
  dct_title: 'TaintBench: Automatic real-world malware benchmarking of Android taint
    analyses@'
...