Usage of wavefront alignment algorithm for finding of potentially vulnerable native components with open-source code in Android applications

Problem Statement. Vulnerabilities in open-source components can compromise the confidentiality, integrity, and availability of information processed by products that use these components. The most promising technique for preventing the exploitation of known vulnerabilities in open-source components is software compositional analysis. Objective. To present a method for detecting potentially vulnerable native open-source components in Android-based cordless phone applications using a wavefront alignment algorithm. Results. A method for detecting potentially vulnerable native open-source components in Android-based cordless phone applications using a wavefront alignment algorithm is proposed. A software prototype is developed and experimentally evaluated. Research has shown that the proposed method enables the detection of potentially vulnerable open-source components without the need to create, store, and update a feature database for these components. Practical Relevance. Further research in this area can be aimed at developing new tools for detecting and patching n-day vulnerabilities in the software code of Android-based cordless phone applications.