Open-sourcing Mariana Trench: Analyzing Android and Java app security in depth

What this post added

This post introduces Mariana Trench (MT), an open-sourced tool for static and dynamic analysis of Android and Java applications to detect security and privacy bugs. MT analyzes data flows by defining sources and sinks and uses abstract interpretation to model Java methods. It prioritizes finding potential issues, even with false positives, and integrates with pull request workflows. A companion tool, Static Analysis Post Processor (SAPP), is also discussed for triaging MT's output.