Open-sourcing Mariana Trench: Analyzing Android and Java app security in depth

This post introduces Mariana Trench (MT), an open-sourced tool for static and dynamic analysis of Android and Java applications. MT focuses on analyzing data flows from sources to sinks to identify security and privacy vulnerabilities. It uses abstract interpretation to model Java methods and allows security engineers to define rules for specific data flows. The post also highlights the companion tool SAPP (Static Analysis Post Processor) for triaging MT's results.