WOOTdroid enables whole-system on-device tracing on stock Android by porting eBPF syscall auditing and adding kernel Binder parcel capture with out-of-process decoding via framework signatures, showing low overhead and successful reconstruction of security transactions.
Alexopoulos et al.SliceDroid: Towards Reconstructing Android Ap- plication I/O Behaviors from Kernel Traces
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
WOOTdroid: Whole-system Online On-device Tracing for Android
WOOTdroid enables whole-system on-device tracing on stock Android by porting eBPF syscall auditing and adding kernel Binder parcel capture with out-of-process decoding via framework signatures, showing low overhead and successful reconstruction of security transactions.