❮ Android Automotive Vulnerability Droid (AAVD)
About

About Android Automotive Vulnerability Droid

The AAVD tool uses Python script to perform APK decompilation and merging source files to compile a single file for analysis and uses TXL programming language to perform static analysis. It performs tainted data flow analysis on limited sources and sinks specified in TXL rules. It searches for the sinks in the source code and perform backpropagation till it find the source and reports the data flows. This tool can be used to detect insecure app to app communications. It's specifically designed for Android Automotive apps but can be used on Android apps as well. The tool presented in this website is limited to static analysis only. However, with Python script it can be used to find inter-component communication leaks among multiple apps.

© CRESSET Lab, Ryerson University.

Developed by: Abdul Moiz as part of MSc. thesis under supervision of Prof. Manar Alalfi