Okara: Detection and Attribution of TLS Man-in-the-Middle Vulnerabilities in Android Apps with Foundation Models

Okara uses foundation-model-driven GUI agents to explore Android apps for TLS vulnerability detection, then applies instrumentation and classification to attribute vulnerable code.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research paper

Environment

Android

Topics

Automation, Mobile navigation, Safety & security

Record publication date

2026-01-30

Evidence retrieved

2026-11-05

Resource ID

arxiv:2601.22770

Recorded paper version

arXiv v2

Version updated: 2026-03-17T11:27:35Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Haoyun Yang, Ronghong Huang, Yong Fang, Beizeng Zhang, Junpu Guo, Zhanyu Wu, Xianghang Mi

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v2). Experiments, reported performance and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-11-05T21:14:07Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   410a4c48b9605a531d3e6008c561ce3e3e9d92609168f5d49fadc04f5f943289
2. editorial primary review

   Retrieved 2026-11-05T23:02:29Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   250035ccb17077dd636d97f36146c3b2773879e07f5eccc4bb7a13c8fb2d5586

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub