Context 

The Android operating system is well-known for kernel fragmentation on endpoint devices. This fragmentation causes delays or even prevents kernel updates, leading to devices running outdated kernel versions. In 2019, Google launched the Generic Kernel Image (GKI) project to address this issue, aiming to reduce fragmentation and speed up kernel update distribution. 

Research goal 

The primary goal of this thesis is to measure the propagation delay of security patches in the Android kernel. The student will collect and analyze data on the propagation of Linux kernel patches to the Android kernel. This analysis will include a subset of historical CVEs introduced in the Android Security Bulletin and CVEs not yet presented in the bulletin. The focus will be on patch delay propagation in the context of the GKI project. The thesis will also explore weaponization potential of these CVEs, given an attacker having access to sufficient information prior to the publication of CVEs in Android Security Bulletin.  

The practical part will: 

1. Develop a tool to automatically mine the propagation of Linux kernel updates to the Android kernel.   
2. Deliver data analysis of security-patch propagation from Linux kernel to Android kernel including results discussion.
3. Study historical CVEs and CVEs not yet introduced in Android Security Bulletin, concentrating on their weaponization potential based on open-source information. 
4. Measure the empirical propagation delay distribution, assessing the time taken from the application of a security patch upstream to its implementation on end devices, utilizing existing research.