Hwacha: A Flexible Intent Fuzzer with an Automatic Tally of Failures for Robustness of Inter-Component Communication in Android Apps

Hwa-Cha(Multiple Rocket Launcher) firing Sin-Gi-Jeon(Fire Arrow Rocket)

Overview

Hwacha is a flexible Intent fuzzer with an automatic tally of failures for robustness of inter-component communication in Android apps. The flexibility comes from the use of Intent specification language to decouple Intent testcase generators from executors. This Intent fuzzer employs a traditional longest common subsequence algoritm to classify failures automatically.

Hwacha provides a GUI-based interactive mode and a command-line based mode for testing a single Android app; a batch mode for testing multiple Android apps.

Instructions

• How to Install and Run
• Screen Shots and Features
• LL(1) Grammar of the Intent Specification Language

Download (for Windows)

• A Snapshot of Binary & Source, also available in GitHub
  • The binary executables are compiled on Windows 10 using Javac 1.8.0_45 and GHC 7.4.1 and higher.
  • The source code consists of a Java project for UI, a Haskell project for Test data/code generation, and some auxiliary library.
  • In Eclipse, import only the Java project with the pre-compiled binary of the Haskell project unless you are familar with Haskell.

• Android APK files and Analysis Results (822MB)

Publication

• Kwanghoon Choi, Myungpil Ko, Byeong-Mo Chang, A Practical Intent Fuzzing Tool for Robustness of Inter-Component Communication in Android Apps, KSII Transactions on Internet and Information Systems, Vol.12, Issue 9, pp.4248-4270, September 30, 2018. (PDF)

Contributors

• Kwanghoon Choi : Android JUnit Test Code Generator, Command-line based Processing, Main UI
• Myung-Pil Ko : Main UI, ADB Command Runner, Intent Specification Parser (both Java and Haskell versions), Intents Generator
• Seungwhi Lee : Batch mode, Watch dog
• Sung-Bin Yoon : Intent Specfication Generator (from APK files and AndroidManifest.xml)
• Ji-Sun Choi : Gathering 20 Android App Binaries for Testing (including Facebook, KakaoTalk, etc.)
• Hyun-Soon Kim : Grouping Similar Logs into the same single failure

Any Questions?

• Email : kwanghoon.choiXyonsei.ac.kr (where X is @)