## 1 Introduction  
The world currently is heavily dependent on the Internet of Things (IoT) for our daily lives [1]. The IoT is a rapidly growing field and is expected to expand in the coming years. This growth is likely driven by various factors, including the increasing affordability and availability of smart devices and the growing demand for connected products and services. Android is an operating system often used on the IoT, based on the Linux kernel, acquired initially and currently developed by Google, and was first released in 2008. The Android operating system supports the IoT, which means that it can be used to connect and control a wide range of smart devices. For example, an Android device can monitor and maintain smart home appliances, such as thermostats and lighting systems. In addition, many Android devices are equipped with sensors and other hardware to collect data from the environment and provide input to IoT applications. Overall, the combination of Android and the IoT offers many possibilities to create useful and innovative connected products and services [2, 3, 4]. Smartphones and other mobile devices are used for mobile health applications (mHealth applications) and recently have played an increasingly important role in the healthcare industry [5]. Android and mHealth applications are used for various purposes, including patient care, clinical decision support, exchange of health information, and remote patient monitoring [6]. In addition, Android devices are increasingly popular in the healthcare domain, but as they become more commonplace, so do their security and privacy risks. According to ENISA and the report published in July 2022 ([[https://www.enisa.europa.eu/news/ransomware-publicly-reported-incidents-are-only-the-tip-of-the-iceberg](https://www.enisa.europa.eu/news/ransomware-publicly-reported-incidents-are-only-the-tip-of-the-iceberg)]([https://www.enisa.europa.eu/news/ransomware-publicly-reported-incidents-are-only-the-tip-of-the-iceberg](https://www.enisa.europa.eu/news/ransomware-publicly-reported-incidents-are-only-the-tip-of-the-iceberg))), _Between May 2021 and June 2022 about ten terabytes of data were stolen each month by ransomware threat actors. 58.2% of the stolen data included employees' personal data\"_. The study reports that the most-affected sectors include heavy industry, information services, government, and healthcare [7]. A recent relevant example of cyberattacks in the healthcare domain was the case of the Ryuk ransomware [8], as mentioned by ENISA's Threat Landscape Report 2021 (ETL 2021) ([[https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021](https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021)]([https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021](https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021)), accessed 20 February 2023). The healthcare domain has been a target of cyberattacks, especially with the growing use of connected devices known as the Internet of Medical Things (IoMT). Similarly, the IoT extends the threat landscape even further, with the most-common cyberattacks being denial-of-service (DoS) attacks or unauthorised access to sensitive health information [9]. In some cases, cyberattacks lead to the exposure of patient personal health information (PHI) [10; 11]. To address these concerns, healthcare organisations should ensure that their IoT devices, infrastructure, and information systems are adequately secured. Furthermore, many IoMT devices are connected to hospital networks [12], a factor that could allow attackers to access patient health information or even disrupt medical care. There are several ways to perform security and privacy analysis in the IoMT. A common approach for conducting security assessments on Android is static analysis, which examines the source code of applications and operating systems for potential vulnerabilities. Another method is to use dynamic analysis to monitor the behaviour of these devices at runtime.