AI 中文总结
针对现有移动平台克隆检测方法无法适配VR应用的问题，提出基于HOB的两阶段框架VR-Themis，从4277个VR应用中无假阳性检测出307个可疑克隆应用，兼具有效性与可扩展性。
AI 中文摘要
移动应用的重新打包（即应用克隆）不仅威胁移动用户的安全与隐私，还侵犯原始应用开发者的版权。然而，现有主要针对安卓等移动平台的检测方法无法捕捉虚拟现实（VR）应用的关键特征，因此难以有效检测VR市场中常被非法用户盯上的克隆VR应用。考虑到VR应用的独特特征，本文提出一种两阶段应用克隆检测框架VR-Themis，基于Hierarchy-Object-Behaviour（HOB）构建。首先，VR-Themis利用粗粒度阶段，基于可检索的统计特征对应用进行聚类，使该工具可扩展至大规模VR应用数据集；接着，在细粒度阶段，VR-Themis通过计算所定义的HOB指标的相似度，对第一阶段识别出的可疑应用进行深入分析。大量实验表明，VR-Themis从收集的4277个VR应用中成功检测出307个可疑克隆应用，且无假阳性，证明了其有效性与可扩展性。
英文摘要
Repackaging of mobile applications (aka app cloning) not only threatens the security and privacy of mobile users but also infringes upon the copyright of the original app developers. However, existing detection methods that primarily focus on mobile platforms (such as Android) fail to capture the essential features of virtual reality (VR). Consequently, they are inadequate for effectively detecting cloned VR apps, which have often been targeted by illegal users in the VR market. Considering the unique features of VR apps, this paper proposes a two-stage app clone detection framework, namely VR-Themis, based on \emph{Hierarchy-Object-Behaviour} (HOB). Firstly, VR-Themis exploits the coarse-grained stage to cluster apps based on their retrievable statistical features, making this tool scalable to large-scale VR app datasets. Then, in the fine-grained stage, VR-Themis performs in-depth analysis of the suspicious apps (identified in the first stage) by calculating similarity using our defined \emph{HOB metrics}. Our extensive experiments indicate that VR-Themis successfully detects 307 suspected clone apps from the collected 4,277 VR apps without false positives, demonstrating its effectiveness and scalability.
Comments25 pages, 14 figures, 1 table. Accepted at the 29th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2026)
