Automated Mobile App Vulnerability Checking via OS-Specific Execution Analysis

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for checking vulnerabilities in mobile applications are inefficient, requiring expert analysis and manual testing of execution files, which is time-consuming and costly, especially since source code is often unavailable for analysis.

Innovation Solution

A server and method that automate vulnerability checking by analyzing target execution files based on the operating system type, including tests for vulnerable authorities, functions, memory hacking prevention, exposed strings, symbols, and library vulnerabilities, with additional manual testing when necessary to increase efficiency and accuracy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual black-box testing is used to check vulnerabilities in mobile applications, then vulnerability detection capability is improved, but checking efficiency and productivity deteriorate due to requiring expert analysis and repeated manual testing

Engineering Contradiction:

Improvevulnerability detection capabilityVSAvoidchecking efficiency

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The system performs self-testing by automatically executing test cases against the mobile application using instrumented test devices. The testing system autonomously conducts vulnerability checks without requiring continuous expert intervention, thereby improving efficiency while maintaining detection capability through structured test algorithms

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Manual expert analysis is replaced with automated testing systems that use instrumented test devices and algorithms to detect vulnerabilities. The mechanical process of manual code review and analysis is substituted with automated execution and result interpretation, significantly improving productivity

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If comprehensive vulnerability testing is conducted manually, then measurement precision of vulnerability detection is improved, but loss of time increases due to requiring repeated testing even after vulnerabilities are corrected

Engineering Contradiction:

Improvevulnerability analysis accuracyVSAvoidchecking time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary vulnerability testing automatically before application release or distribution. By conducting comprehensive tests in advance using automated systems, the need for repeated manual testing after corrections is reduced, saving time while maintaining detection accuracy

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The testing system provides automated feedback on vulnerability detection results and correction effectiveness. This feedback mechanism allows the system to automatically verify whether vulnerabilities have been overcome without requiring repeated manual analysis, reducing time loss while maintaining precision

Inventive Principle:

Principle #23Feedback

3Productivity

If automated vulnerability checking is implemented, then productivity and checking efficiency are improved, but measurement precision may deteriorate without expert analysis capability

Engineering Contradiction:

Improvechecking efficiencyVSAvoidvulnerability detection accuracy

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

Expert manual analysis is replaced with automated testing systems using instrumented test devices. The system substitutes human expert processes with automated algorithms that execute test cases and analyze results, improving productivity while maintaining detection capability through structured testing approaches

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The automated system performs self-analysis of vulnerability test results without requiring external expert intervention. The instrumented test devices autonomously interpret test outcomes and generate vulnerability assessments, maintaining precision through consistent algorithmic analysis

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS11068602B2Server and method for checking vulnerability of mobile application

Publication Date: 2021.07.20 M SECURE

AI summary

Provided are a server and method for checking a vulnerability of a mobile application. The method includes (a) receiving a target execution file whose vulnerabilities will be checked and which corresponds to a mobile application to be executed in a mobile terminal, (b) testing vulnerabilities of the target execution file according to a type of an operating system of the target execution file, and (c) generating results of analyzing vulnerabilities of the target execution file on the basis of results of checking vulnerabilities of the target execution file.