StaDART: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications

•A set of benchmark apps to test static analysis tools for reflection resolution.•StaDART combines static and dynamic analysis to resolve dynamic code updates.•StaDART analyzes the arguments of reflection APIs without framework modification.•StaDART integrates DroidBot for automated triggering of apps.•StaDART is evaluated on a dataset of 1000 benign and 1000 malicious app.