Abstract: Nowadays, mobile devices have become an important part of peoples life, which also brings many novel security problems. Normally mobile devices store lots of users’ private data such as contacts’ information, which could be utilized by malwares leading to data leaks. Existing taint analysis tools of Android applications cannot deal with Fragment API, this paper designs a method based on simulation of Fragment lifecycles and static taint analysis to inspect the potential data leaks in Fragments of Android applications. The experiment results verify the effectiveness of the method.

Key words: Android, taint analysis, Fragment, lifecycle