Published Paper Details:

In recent years, the rapid growth of Android applications has intensified the need for secure mobile software, while many existing vulnerability detection techniques still depend heavily on manual review and runtime testing. The proposed Static Analyzer of Vulnerabilities in Android Applications seeks to automate this task by introducing a static analysis framework that identifies insecure coding practices directly from decompiled APK files. Unlike traditional dynamic scanners, the system applies regex-based and rule-driven inspection to application source code, manifest files, and Smali components without executing the app. The analysis core is implemented using Python and integrates reverse engineering tools such as JADX and APKTool for efficient extraction and processing. Detected issues, including API misuse, hardcoded credentials, and permission misconfigurations, are automatically consolidated into structured HTML and JSON reports. A lightweight interface enables developers to upload APKs and review categorized vulnerability findings with ease. Rule-based filtering is used to reduce false positives and improve detection reliability. Validation on benchmark datasets demonstrates that the framework achieves strong accuracy, scalability, and low computational overhead. By combining automated static analysis with clear and intuitive reporting, the proposed approach streamlines Android vulnerability detection into a fast, accessible, and developer-friendly security assessment process.