A First Look at On-device Models in iOS Apps

AI-generated keywords: On-device models iOS and Android apps Deep learning frameworks Code analysis techniques Decision-making processes

AI-generated Key Points

  • Researchers explore factors influencing developers' choices of on-device models for iOS and Android apps
  • Study involves analyzing 62 pairs of iOS-Android apps out of a total of 312
  • Identify 226 on-device models with specific functionalities in selected iOS apps
  • Pipeline includes identifying functionalities and usage scenarios in iOS apps, then locating similar scenarios in Android counterparts using code analysis techniques
  • Semantic information like file names, method names, and user interface elements used to infer potential usage scenarios
  • Findings validated by running apps to verify inferred scenarios align with model functionalities
  • Three alternatives for on-device models: utilizing other on-device models, invoking on-cloud models, or implementing custom obfuscation techniques
  • Developers may use cloud-based services by pre-configuring SDK libraries or resorting to customized DL models when no suitable options are available
Also access our AI generated: Comprehensive summary, Lay summary, Blog-like article; or ask questions about this paper to our AI assistant.

Authors: Han Hu, Yujin Huang, Qiuyuan Chen, Terry Tue Zhuo, Chunyang Chen

30 pages, 7 pages, journal paper
License: CC BY 4.0

Abstract: Powered by the rising popularity of deep learning techniques on smartphones, on-device deep learning models are being used in vital fields like finance, social media, and driving assistance. Because of the transparency of the Android platform and the on-device models inside, on-device models on Android smartphones have been proven to be extremely vulnerable. However, due to the challenge in accessing and analysing iOS app files, despite iOS being a mobile platform as popular as Android, there are no relevant works on on-device models in iOS apps. Since the functionalities of the same app on Android and iOS platforms are similar, the same vulnerabilities may exist on both platforms. In this paper, we present the first empirical study about on-device models in iOS apps, including their adoption of deep learning frameworks, structure, functionality, and potential security issues. We study why current developers use different on-device models for one app between iOS and Android. We propose a more general attack against white-box models that does not rely on pre-trained models and a new adversarial attack approach based on our findings to target iOS's gray-box on-device models. Our results show the effectiveness of our approaches. Finally, we successfully exploit the vulnerabilities of on-device models to attack real-world iOS apps.

Submitted to arXiv on 23 Jul. 2023

Ask questions about this paper to our AI assistant

You can also chat with multiple papers at once here.

AI assistant instructions?

Results of the summarizing process for the arXiv paper: 2307.12328v1

In their study published in ACM Trans. Softw. Eng. Methodol., researchers Han Hu, Yujin Huang, Qiuyuan Chen, Terry Yue zhuo, and Chunyang Chen explore the factors influencing developers' choices of on-device models for iOS and Android apps. They establish a comprehensive pipeline to analyze how developers replace and share on-device models between the two platforms by examining 62 pairs of iOS-Android apps out of a total of 312. Through manual analysis, they identify 226 on-device models with specific functionalities in the selected iOS apps. The study pipeline involves identifying the functionalities and usage scenarios of on-device models in iOS apps and then attempting to locate similar scenarios in Android counterparts using code analysis techniques. Semantic information such as file names, method names, and user interface elements are also analyzed to infer potential usage scenarios when direct code comparison is not feasible. The researchers validate their findings by running the apps to verify if inferred scenarios align with model functionalities. The study reveals three alternatives for on-device models: utilizing other on-device models for the same task, invoking on-cloud models, or implementing custom obfuscation techniques. Developers may choose to use cloud-based services by pre-configuring SDK libraries in Android apps or resorting to customized DL models when no suitable options are available. Overall, this research sheds light on the complexities involved in selecting on-device models for iOS and Android apps and provides insights into developers' decision-making processes when it comes to leveraging deep learning frameworks for mobile applications.
Created on 24 Jun. 2024

Assess the quality of the AI-generated content by voting

Score: 0

Why do we need votes?

Votes are used to determine whether we need to re-run our summarizing tools. If the count reaches -10, our tools can be restarted.

The previous summary was created more than a year ago and can be re-run (if necessary) by clicking on the Run button below.

Similar papers summarized with our AI tools

Navigate through even more similar papers through a

tree representation

Look for similar papers (in beta version)

By clicking on the button above, our algorithm will scan all papers in our database to find the closest based on the contents of the full papers and not just on metadata. Please note that it only works for papers that we have generated summaries for and you can rerun it from time to time to get a more accurate result while our database grows.

Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.