Razvoj dodatka za omogućavanje statičke analize koda u programu Android Studio

undergraduate thesis

• Title (english): Development of plugin to enable static code analysis in Android Studio
• Author: Antonio Špoljar
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Committee member: Ivan Kovačević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-16, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Android aplikacije su danas vrlo raširene, a velik je naglasak stavljen na njihovu sigurnost. Alati koji programeru pomažu pri automatizaciji procesa provjere sigurnosti su alati za statičku analizu izvornog koda. Ovaj rad opisuje izradu dodatka SCAT (Source Code Analysis Tools) za Android Studio koji koristi nekoliko takvih alata. Prvo je ukratko objašnjeno što je to statička analiza izvornog koda, te je predstavljeno nekoliko alata za statičku analizu korištenih u radu. Zatim se čitatelj upoznaje sa skriptom koja se pokreće u naredbenom retku i korištenjem spomenutih alata analizira Android Studio projekt ili Java datoteku. Objašnjeni su osnovni koncepti pri izrađivanju dodataka za Android Studio, te je konstruiran HelloWorld dodatak kao primjer. Proširivanjem koncepata korištenih u HelloWorld dodatku se postepeno gradi dodatak SCAT, koji je zapravo sučelje korisnika prema skripti. Na kraju je opisano kako se dodatak može uključiti u Android Studio.

Abstract (english)

Android applications are very common in today's world, and great emphasis is placed upon their security. Tools which help programmer automatize the process of security checking are called static code analysis tools. This thesis describes the making of plugin SCAT (Source Code Analysis Tools) for Android Studio, which utilises several static code analysis tools. Firstly, static source code analysis is briefly explained, and several tools used in the plugin are introduced. Then the script which uses the aforementioned tools to analyse an Android Studio project or a Java file is described. Basic concepts used in making an Android Studio plugin are explained, and a HelloWorld example plugin is built. Expanding upon the introduced concepts, SCAT plugin, which is an interface between user and the script, is gradually being built. In the end, SCAT plugin is distributed locally and enabled in Android Studio.

• Keywords: Android Studio; dodatak; statička analiza koda
• Keywords (english): Android Studio; plugin; static code analysis
• Language: croatian
• URN:NBN: urn:nbn:hr:168:101414
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 10:05:33