Dr. Jyoti Prakash

research projects

Demand-driven Information Flow Analysis of WebView in Android Hybrid Apps

WebView encapsulates information flows from Java to JavaScript and vice-versa.
In this project, we developed a demand-driven information flow analysis for Android hybrid apps.

Unifying Pointer Analysis for Static Analysis of Multilingual Applications

Can we combine different program analyses, say, WALA + SVF?
We developed an approach to combine existing analyses to analyze multilingual (polyglot) applications.

  • Tool: To be published soon
Understanding Fingerprinting in Hybrid Browsers

How vulnerable are Android WebViews to fingerprinting?
We developed dynamic instrumentation to collect attributes related to fingerprinting in Android WebViews.
Our study revealed that Android WebViews are equally or more vulnerable to fine-grained fingerprinting compared to traditional browsers.

Program Representation Effects on Pointer Analysis

Do different intermediate representations affect the outcome of pointer analysis?
We created metrics to compare program analyses by isolating the effect of their underlying representations.
The results showed that such parameters have little to no effect on precision, making fair comparisons viable.

Security Vulnerabilities in Android WebView

How vulnerable are Android WebViews to JavaScript injection and misuse?
We designed a static analysis technique to collect JavaScript passed from Android to WebView.
Our study showed that such flows are often vulnerable, and sometimes Java control flow is influenced by external JS APIs.

  • Tool: Available on request
Points-to Analysis using Push-Down Systems

In this project, we expressed points-to analysis as a push-down system reachability problem, enabling sound handling of recursive programs.

Note: The tools listed here are research prototypes and should be treated as alpha-quality software.