Exploring Dynamic Security Analysis of Android Apps Across Flutter Versions

The development of Flutter applications, particularly for Android, continues to grow in response to market demands, driven by the flexibility offered by this framework. As Flutter development progresses over time, various versions are utilized throughout the application lifecycle. However, the increasing frequency and diversity of cyberattacks, targeting both the network and the application layers, highlight the importance of securing applications. This paper presents a comparative analysis of five Flutter versions, ranging from version 2.0.0 to the latest version, 3.27.0. The applications were uniformly designed by the authors and subsequently analyzed and compared to draw meaningful conclusions. The findings of this study reveal that the latest Flutter version (3.27.0) is the most difficult to intercept in terms of network security. Additionally, it was observed that network interception tests using different methods produced varying and inconsistent results. On the application layer, tests on application logs and internal storage yielded similar results across all versions, indicating that all tested versions store sensitive data in plain text. Each Flutter version presents its own strengths and weaknesses in terms of security. Therefore, the authors recommend that Flutter app developers adopt secure coding practices to enhance application security.