arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2103.11668cs.SE
收藏

根据应用描述检查应用行为:如果没有应用描述怎么办?

Checking App Behavior Against App Descriptions: What If There are No App Descriptions?

Md. Shamsujjoha, John Grundy, Li Li, Hourieh Khalajzadeh, Qinghua Lu

摘要:

基于移动应用程序的描述对其进行分类有几个好处。然而,许多应用程序的描述并不反映应用程序的功能,无论是偶然还是故意的。最重要的是,如果应用程序描述不可用,这些应用程序分类方法将不起作用。本文研究了一种基于逆向工程的方法,使用应用程序中存在的数据对移动应用程序进行分类,称为REACT。为了验证所提出的REACT方法,我们使用了大量的Android应用程序(总共24,652个应用程序)。我们还展示了REACT在恶意软件/异常检测方面的可扩展性,并证明了其可靠性和可扩展性。然而,我们的分析显示了REACT过程和实现的一些局限性,特别是对于基于相似功能的应用程序分组。我们讨论了这些失败的根本原因,我们的主要经验教训,以及一些未来的增强想法。我们还为应用市场分析师、移动应用开发人员和软件工程研究社区分享我们的REACT工具和复制数据集,以供进一步研究之用。

英文摘要:

Classifying mobile apps based on their description is beneficial for several purposes. However, many app descriptions do not reflect app functionalities, whether accidentally or on purpose. Most importantly, these app classification methods do not work if the app description is unavailable. This paper investigates a Reverse Engineering-based Approach to Classify mobile apps using The data that exists in the app, called REACT. To validate the proposed REACT method, we use a large set of Android apps (24,652 apps in total). We also show REACTs' extendibility for malware/anomaly detection and prove its reliability and scalability. However, our analysis shows some limitations in REACT procedure and implementation, especially for similar feature based app grouping. We discuss the root cause of these failures, our key lessons learned, and some future enhancement ideas. We also share our REACT tools and reproduced datasets for the app market analyst, mobile app developers and software engineering research communities for further research purposes.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑