APPraiser: A large scale analysis of android clone apps

Yuta Ishii, Takuya Watanabe, Mitsuaki Akiyama, Tatsuya Mori

Research output: Contribution to journalArticlepeer-review

2 Citations (Scopus)

Abstract

Android is one of the most popular mobile device platforms. However, since Android apps can be disassembled easily, attackers inject additional advertisements or malicious codes to the original apps and redistribute them. There are a non-negligible number of such repackaged apps. We generally call those malicious repackaged apps "clones." However, there are apps that are not clones but are similar to each other. We call such apps "relatives." In this work, we developed a framework called APPraiser that extracts similar apps and classifies them into clones and relatives from the large dataset. We used the APPraiser framework to study over 1.3 million apps collected from both official and third-party marketplaces. Our extensive analysis revealed the following findings: In the official marketplace, 79% of similar apps were attributed to relatives, while in the third-party marketplace, 50% of similar apps were attributed to clones. The majority of relatives are apps developed by prolific developers in both marketplaces. We also found that in the third-party market, of the clones that were originally published in the official market, 76% of them are malware.

Original languageEnglish
Pages (from-to)1703-1713
Number of pages11
JournalIEICE Transactions on Information and Systems
VolumeE100D
Issue number8
DOIs
Publication statusPublished - 2017 Aug

Keywords

  • Android
  • Large-scale data
  • Mobile security
  • Repackaging

ASJC Scopus subject areas

  • Software
  • Hardware and Architecture
  • Computer Vision and Pattern Recognition
  • Electrical and Electronic Engineering
  • Artificial Intelligence

Fingerprint

Dive into the research topics of 'APPraiser: A large scale analysis of android clone apps'. Together they form a unique fingerprint.

Cite this