IccTA: An Inter-Component Communication based Taint Analysis Tool for Android Apps
Android applications may leak privacy data carelessly or maliciously. In this work we perform inter-component data-flow analysis to detect privacy leaks between components of Android applications. Unlike all current approaches, our tool, called IccTA, propagates the context between the components, which improves the precision of the analysis. IccTA outperforms all other available tools by reaching a precision of 95.0% and a recall of 82.6% on DroidBench. Our approach detects 147 inter-component based privacy leaks in 14 applications in a set of 3000 real-world applications with a precision of 88.4%. With the help of ApkCombiner, our approach is able to detect inter-app based privacy leaks.

For more information, please check our Paper:
L. Li, A. Bartel, T. F. Bissyandé, J. Klein, Y. Le Traon, S. Arzt, S. Rasthofer, E. Bodden, D. Octeau, and P. Mcdaniel. Iccta: Detecting inter-component privacy leaks in android apps. In Proceedings of the 37th International Conference on Software Engineering (ICSE 2015), 2015. [pdf] [bib]
or our Technique Report :
Li Li, Alexandre Bartel, Jacques Klein, Yves Le Traon, Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, Patrick McDaniel: I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis № ISBN: 978-2-87971-129-4, 2014 [pdf] [bib]


News of IccTA
[2014-12-18] IccTA paper was accepted by ICSE 2015. Now you can cite our paper through [bib].
[2014-07-01] The source code of IccTA is available at https://github.com/lilicoding/soot-infoflow-android-iccta.git.
[2014-05-05] IccTA on the news: Boffins tag Android app privacy fails AT 
    The Register 
Internet Security and Ste Williams's web site.
[2014-04-29] IccTA's technique report paper online, see paper.
[2014-03-30] IccTA web site created.
[2014-03-12] The first version of IccTA is presented at GRSRD2014 in title: Using A Path Matching Algorithm to Detect Inter-Component Leaks in Android Apps. The path matching approach, which is different than the current approach, turn out to have some drawbacks (e.g., it does not able to perform data-flow analysis between two components). Therefore, we change to the current instrumenting approach, check our technique report for more details.