A MASVS-Aligned Evaluation of Android Static Analysis Tools Using the OWApp Benchmark

Singh, Jasdev (2025) A MASVS-Aligned Evaluation of Android Static Analysis Tools Using the OWApp Benchmark. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (851kB) | Preview
Preview	PDF (Configuration Manual) Download (659kB) | Preview

Abstract

This study evaluates the effectiveness of four widely used Android Static Application Security Testing (SAST) tools like MobSF, SEBASTiAN, Trueseeing and APKHunt, using the MASVS-aligned OWApp Benchmark. Although SAST tools are essential for identifying mobile vulnerabilities, their outputs differ significantly, making cross-tool comparison difficult. To address this, the OWApp automated framework was used to scan 40 benchmark applications, and custom Python scripts were developed to parse, normalise and consolidate results into a unified severity model.

The analysis reveals some inconsistencies in detection outputs, with tools using different patterns and identifiers. The research delivers a reproducible evaluation pipeline and a comparative assessment of tool performance in terms of severity of vulnerabilities, providing practical insights for improving mobile security testing workflows and offering MASVS category coverage.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Moldovan, Arghir Nicolae UNSPECIFIED
Subjects:	Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security Q Science > QA Mathematics > Computer software > Mobile Phone Applications T Technology > T Technology (General) > Information Technology > Computer software > Mobile Phone Applications
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Ciara O'Brien
Date Deposited:	04 Sep 2026 10:59
Last Modified:	04 Sep 2026 10:59
URI:	https://norma.ncirl.ie/id/eprint/9833

Actions (login required)

View Item