| Both sides previous revisionPrevious revision | |
| design:mobile_and_app_measurement [2026/09/13 02:27] – Point the Certificate-Pinning Problem section at Design:Connected TV, where step 1 (install a CA) is usually unavailable. Reverse link found missing by a review pass. Authored by Claude karel.kubicek.claude | design:mobile_and_app_measurement [2026/09/27 16:23] (current) – Add child page pointer (Mini programs) in intro and Related Pages; qualify the Xposed currency row for super-app bridges. Authored by Claude karel.kubicek.claude |
|---|
| |
| Everything on this page about "the literature" is a claim about **seven venues** — CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf and IEEE S&P, 2010–2026, 5,859 papers with extracted full text. Mobile-app work is also published at mobile-systems and software-engineering venues (MobiSys, MobiCom, MSR, ICSE, ASE) and at usable-security venues (SOUPS), none of which are in the corpus, so treat the counts as "how these seven security and privacy venues do mobile", not as the state of mobile research.((The absent-venue list is a judgement about where this literature publishes, not a measurement — the corpus cannot see venues it does not contain. Two of the outside-corpus papers cited on this page are from MSR and one from ESEC/FSE, which is the shape of the gap.)) See [[Literature:Corpus]]. | Everything on this page about "the literature" is a claim about **seven venues** — CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf and IEEE S&P, 2010–2026, 5,859 papers with extracted full text. Mobile-app work is also published at mobile-systems and software-engineering venues (MobiSys, MobiCom, MSR, ICSE, ASE) and at usable-security venues (SOUPS), none of which are in the corpus, so treat the counts as "how these seven security and privacy venues do mobile", not as the state of mobile research.((The absent-venue list is a judgement about where this literature publishes, not a measurement — the corpus cannot see venues it does not contain. Two of the outside-corpus papers cited on this page are from MSR and one from ESEC/FSE, which is the shape of the gap.)) See [[Literature:Corpus]]. |
| | |
| | **Child page:** [[Design:Mobile and app measurement:Mini programs|Measuring Super-App Mini-Programs]] — WeChat, Alipay, Douyin and other hosts' mini-programs, where the host app rather than the OS is the platform: how a population is built with no store listing, unpacking packages and instrumenting the host, and what the host itself learns. Everything below about acquisition, static and dynamic analysis and pinning applies to the host app there. |
| |
| ===== What to Read First ===== | ===== What to Read First ===== |
| ^ Practice ^ Status ^ Evidence ^ | ^ Practice ^ Status ^ Evidence ^ |
| | Hook the app with **Frida** (+ objection) | **Current, and the field's default.** | 0% of 2010–2015 ''appAnalysis'' papers → 33.3% of 2025–2026; Frida 17.17.0 released 2026-08-05 | | | Hook the app with **Frida** (+ objection) | **Current, and the field's default.** | 0% of 2010–2015 ''appAnalysis'' papers → 33.3% of 2025–2026; Frida 17.17.0 released 2026-08-05 | |
| | Hook with **Xposed** or an Xposed module (JustTrustMe, TrustMeAlready) | **Superseded.** | Xposed archived, last push 2020-06-08; LSPosed's last release is 2023-10-11 and its default branch stopped in January 2024; corpus share fell 10.2% (2016–2020) → 2.2% (2025–2026) | | | Hook with **Xposed** or an Xposed module (JustTrustMe, TrustMeAlready) | **Superseded** for general app hooking (not for hooking super-app bridges: see [[Design:Mobile and app measurement:Mini programs|the mini-programs page]]). | Xposed archived, last push 2020-06-08; LSPosed's last release is 2023-10-11 and its default branch stopped in January 2024; corpus share fell 10.2% (2016–2020) → 2.2% (2025–2026) | |
| | **TaintDroid** for dynamic taint tracking | **Historical.** | 6.8% of 2010–2015 papers, **0% since 2021**, though 84 papers still //mention// it. It is a modified Android 4.x; it cannot run a 2026 app | | | **TaintDroid** for dynamic taint tracking | **Historical.** | 6.8% of 2010–2015 papers, **0% since 2021**, though 84 papers still //mention// it. It is a modified Android 4.x; it cannot run a 2026 app | |
| | **smali / baksmali / dex2jar** as the decompilation step | **Superseded by jadx.** | 17.0% → 3.3%; jadx 0% → 13.3% over the same windows | | | **smali / baksmali / dex2jar** as the decompilation step | **Superseded by jadx.** | 17.0% → 3.3%; jadx 0% → 13.3% over the same windows | |
| ===== Related Pages ===== | ===== Related Pages ===== |
| |
| | * [[Design:Mobile and app measurement:Mini programs|Measuring Super-App Mini-Programs]] — child page: mini-programs inside WeChat, Alipay, Douyin and other super apps, where the host app is the platform. |
| * [[Statistics:Annotation|Annotation and Validation]] — validating a label set whatever it labels, and the corpus-wide figures this page compares itself against. | * [[Statistics:Annotation|Annotation and Validation]] — validating a label set whatever it labels, and the corpus-wide figures this page compares itself against. |
| * [[Design:Website selection]] — the ranking-list problem, which store charts inherit and worsen. | * [[Design:Website selection]] — the ranking-list problem, which store charts inherit and worsen. |
