Towards testing, detecting, and debloating insecure components in Android applications