<html><body><style type="text/css">
<!--
div#d_1543942103915 p {font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#1F497D}
-->
</style><div id='d_1543942103915' style="font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#1F497D"><p dir="ltr" style="margin-top:0; margin-bottom:0;">To add to what the others wrote already, you may wish to use the extension FlowDroid to construct a decent callgraph for an app.</p>
<br>
<p dir="ltr" style="margin-top:0; margin-bottom:0;">Cheers</p>
<p dir="ltr" style="margin-top:0; margin-bottom:0;">Eric</p>
<br>
<div id="signature-x" style="-webkit-user-select:none; font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#1F497D"><html><head></head><body>--<br>Sent from my mobile<br></body></html></div></div><div class="quoted_separate_body"/><div id="quoted_header" style="clear:both;"><hr style="border:none; height:1px; color:#E1E1E1; background-color:#E1E1E1;"/><div style="border:none; padding:3.0pt 0cm 0cm 0cm"><span style="font-size:11.0pt;font-family:Calibri, Arial, Helvetica, sans-serif"><b>Von:</b> Gregor Beatson <gregor.beatson@gmail.com><br><b>Gesendet:</b> Samstag, 1. Dezember 2018 14:45<br><b>An:</b> soot-list@cs.mcgill.ca<br><b>Betreff:</b> [Soot-list] Static Analysis <br></span></div></div><br type='attribution'><div id="quoted_body">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div dir="ltr">
<div dir="ltr">
<div>Hi everyone,</div>
<div><br>
</div>
<div>I'm planning on making a static analysis tool which would focus on Android permissions and their potential misuse. Currently I am looking at using Soot to decompile the APKs into jimple, and performing the analysis on that.</div>
<div><br>
</div>
<div>The main example I can find to do with using Soot on Android apps comes from here:
<a href="https://github.com/Sable/soot/wiki/Instrumenting-Android-Apps-with-Soot" target="_BLANK">
https://github.com/Sable/soot/wiki/Instrumenting-Android-Apps-with-Soot</a></div>
<div><br>
</div>
<div>However, I am unsure of how relevant this is for me. I need to be able to go through the code to detect uses of permissions. At first, the 'transformer' seems to provide this functionality, but on further inspection it seems that it is used to modify the
source code rather than perform analysis on it. In this context, does 'transform' literally mean to transform (modify) the code, or is it general enough that it could be used for my purposes? Is there something else in Soot that would do this, if not transformers?</div>
</div>
</div>
</div></body></html>