IntentDetector: Research on Intent Vulnerability Mining Technology Based on Fuzzing Technology

The Intent is a set of inter-component communication mechanisms supported by HarmonyOS and Android. If the receiver of Intent does not check whether the parameters carried by Intent are legal, it may cause the process to crash and the application to stop running. This paper proposes IntentDetector, a vulnerability mining technology that combines static analysis and dynamic testing implemented on HarmonyOS. Firstly, the components that may have problems and the parameters that may cause problems are collected through reverse analysis. Then, based on Fuzzing technology, a large number of Intent samples are automatically generated, and sent to the components to be tested, and abnormal conditions are recorded, which realizes automated testing. Through experimental tests and result analysis, IntentDetector can realize Intent vulnerability mining on HarmonyOS.