Assessor View uses Jicer, a static slicer for Android apps.
- First, it decompiles the APK and statically constructs its dependence graph.
-
It extends Jicer to segregate all method invocations in the dependence graph into personal data sources (risks
1 and 2) and other privacy-related data sources (risks 3 and 4). Check out the risk categories of data sources
here.
-
It then slices forward from all these sources and labels privacy-relevant methods in the resultant program slices.
-
Finally, Assessor View renders the program slices using
D3.JS. The analysis renders three views:
-
Static Analysis View: The most detailed view in Jimple for static analysis experts.
-
Developer View: Source code insights in Java for Android app developers.
-
DPV View: The most concise view in DPV for DPOs, legal experts, and other stakeholders.