KotlinDetector：了解在Android应用程序中使用Kotlin的含义
KotlinDetector: Towards Understanding the Implications of Using Kotlin in Android Applications
摘要：
Java程序设计语言长期以来一直用于开发原生Android移动应用程序。在过去的几年里，许多公司和自由职业者已经部分或全部改用Kotlin。因此，许多项目都是以二进制文件的形式发布的，并混合使用Java和Kotlin语言结构。然而，这种转变的真正安全和隐私影响尚未得到彻底研究。在这项工作中，开发了一个最先进的工具KotlinDetector，通过执行启发式模式扫描和调用跟踪，直接从Android应用程序包（APK）中提取任何Kotlin的存在，百分比和许多语言功能。我们的评估研究表明，该工具是相当有效和准确的。我们还提供了一个用例，其中KotlinDetector的输出与现有漏洞扫描工具AndroBugs的输出相结合，以推断任何安全和/或隐私影响。
英文摘要：
Java programming language has been long used to develop native Android mobile applications. In the last few years many companies and freelancers have switched into using Kotlin partially or entirely. As such, many projects are released as binaries and employ a mix of Java and Kotlin language constructs. Yet, the true security and privacy implications of this shift have not been thoroughly studied. In this work, a state-of-the-art tool, KotlinDetector, is developed to directly extract any Kotlin presence, percentages, and numerous language features from Android Application Packages (APKs) by performing heuristic pattern scanning and invocation tracing. Our evaluation study shows that the tool is considerably efficient and accurate. We further provide a use case in which the output of the KotlinDetector is combined with the output of an existing vulnerability scanner tool called AndroBugs to infer any security and/or privacy implications.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
