ASPIRE

Program Android Security and Privacy Research (ASPIRE) menyediakan dana untuk riset tertentu yang terkait dengan Android.

ASPIRE mengatasi tantangan mendasar melalui sudut pandang kepraktisan dan mendorong pengembangan teknologi yang mungkin menjadi fitur inti Android di masa mendatang, yang akan memengaruhi ekosistem Android dalam 2 hingga 5 tahun ke depan. Jangka waktu ini melampaui rilis Android tahunan berikutnya untuk memberikan waktu yang cukup untuk menganalisis, mengembangkan, dan menstabilkan riset menjadi fitur sebelum disertakan dalam platform. Perhatikan bahwa hal ini berbeda dengan inisiatif keamanan Android lainnya seperti program pengungkapan kerentanan.

ASPIRE beroperasi dengan mengundang proposal untuk topik riset, memberikan dana untuk proposal terpilih, dan bermitra dengan peneliti eksternal dan Googler. Kami mengumumkan permintaan proposal setahun sekali, biasanya pada pertengahan tahun, dan mengumumkan proposal yang dipilih untuk pendanaan pada akhir tahun kalender.

Selain ASPIRE, jika Anda seorang peneliti yang tertarik untuk mendorong batas keamanan dan privasi Android, ada beberapa cara untuk berpartisipasi:

Publikasi yang didanai oleh ASPIRE

2026

  • A Compilation-Based Under-Constrained Execution Engine Mingjun Yin, Zhaorui Li, Ju Chen, Haochen Zeng, dan Chengyu Song. University of California, Riverside. Operating Systems Design and Implementation (OSDI) 2026. [paper] [slides]

2025

  • ScopeVerif: Analyzing the Security of Android's Scoped Storage via Differential Analysis Zeyu Lei, Güliz Seray Tuncay, Beatrice Carissa Williem, Z. Berkay Celik, dan Antonio Bianchi. Purdue University, Google 2025 [paper]
  • LANShield: Analysing and Protecting Local Network Access on Mobile Devices. Angelos Beitis, Jeroen Robben, Alexander Matern, Zhen Lei, Yijia Li, Nian Xue, Yongle Chen, Vik Vanderlinden, dan Mathy Vanhoef. 25th Privacy Enhancing Technologies Symposium (PETS) 2025. [paper] [website]

2024

  • SIMurai: Slicing Through the Complexity of SIM Card Security Research Tomasz Piotr Lisowski, Merlin Chlosta, Jinjin Wang, dan Marius Muench. 33rd USENIX Security Symposium. [paper] [video] [slides]
  • 50 Shades of Support: A Device-Centric Analysis of Android Security Updates. Abbas Acar, Güliz Seray Tuncay, Esteban Luques, Harun Oz, Ahmet Aris, dan Selcuk Uluagac. Networked and Distributed Systems Security (NDSS) 2024. [paper] [video]
  • Wear's my Data? Understanding the Cross-Device Runtime Permission Model in Wearables. Doguhan Yeke, Muhammad Ibrahim, Güliz SerayP Tuncay, Habiba Farrukh, Abdullah Imran, Antonio Bianchi, dan Z. Berkay Celik. IEEE Symposium on Security and Privacy (S&P) 2024. [paper] [video]
  • (In)Security of File Uploads in Node.js. Harun Oz, Abbas Acar, Ahmet Aris, Güliz Seray Tuncay, Amin Kharraz, Selcuk Uluagac. ACM Web Conference (WWW) 2024. [paper]

2023

  • RøB: Ransomware over Modern Web Browsers. Oz, Harun, Ahmet Aris, Abbas Acar, Güliz Seray Tuncay, Leonardo Babun, dan Selcuk Uluagac. USENIX Security Symposium (USENIX Security) 2023. [paper] [video] [slides]
  • UE Security Reloaded: Developing a 5G Standalone User-Side Security Testing Framework. E Bitsikas, S Khandker, A Salous, A Ranganathan, R Piqueras Jover, C Pöpper. ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec) 2023. [paper] [video] [slides]
  • The Android Malware Handbook. Qian Han, Salvador Mandujano, Sebastian Porst, V.S. Subrahmanian, Sai Deep Tetali. [book]
  • Understanding Dark Patterns in Home IoT Devices. Monica Kowalczyk, Johanna T. Gunawan, David Choffnes, Daniel J Dubois, Woodrow Hartzog, Christo Wilson. ACM Conference on Human Factors in Computing Systems (CHI) 2023. [paper]
  • Continuous Learning for Android Malware Detection. Yizheng Chen, Zhoujie Ding, dan David Wagner. USENIX Security Symposium (USENIX Security) 2023. [paper]
  • PolyScope: Multi-Policy Access Control Analysis to Triage Android Scoped Storage. Yu-Tsung Lee, Haining Chen, William Enck, Hayawardh Vijayakumar, Ninghui Li, Zhiyun Qian, Giuseppe Petracca, dan Trent Jaeger. IEEE Transactions on Dependable and Secure Computing, doi: 10.1109/TDSC.2023.3310402. [paper]
  • Triaging Android Systems Using Bayesian Attack Graphs. Yu-Tsung Lee, Rahul George, Haining Chen, Kevin Chan, dan Trent Jaeger. IEEE Secure Development Conference (SecDev), 2023. [paper]

2022

  • SARA: Secure Android Remote Authorization. Abdullah Imran, Habiba Farrukh, Muhammad Ibrahim, Z. Berkay Celik, dan Antonio Bianchi. USENIX Security Symposium (USENIX Security) 2022. [paper] [video] [slides]
  • FReD: Identifying File Re-Delegation in Android System Services. Sigmund Albert Gorski III, Seaver Thorn, William Enck, dan Haining Chen. USENIX Security Symposium (USENIX Security) 2022. [paper] [video] [slides]
  • Poirot: Probabilistically Recommending Protections for the Android Framework. Zeinab El-Rewini, Zhuo Zhang, Yousra Aafer. ACM Computer and Communication Security (CCS) 2022. [paper]
  • Sifter: Protecting Security-Critical Kernel Modules in Android through Attack Surface Reduction. Hsin-Wei Hung, Yingtong Liu, Ardalan Amiri Sani. ACM Conference on Mobile Computing And Networking (MobiCom) 2022. [paper]

2021

  • An Investigation of the Android Kernel Patch Ecosystem. Zheng Zhang, Hang Zhang, Zhiyun Qian, dan Billy Lau. USENIX Security Symposium (USENIX Security) 2021. [paper] [video] [slides]
  • Demystifying Android's Scoped Storage Defense. Yu-Tsung Lee, Haining Chen, dan Trent Jaeger. IEEE Security & Privacy, vol. 19, no. 05, pp. 16-25, 2021. [paper]

2019

  • Protecting the stack with PACed canaries. H. Liljestrand, Z. Gauhar, T. Nyman, J.-E. Ekberg, and N. Asokan. [paper]