Paper published in a book (Scientific congresses, symposiums and conference proceedings)
FSquaDRA: Fast Detection of Repackaged Applications
Zhauniarovich, Yury; Gadyatskaya, Olga; Crispo, Bruno et al.
2014In Data and Applications Security and Privacy XXVIII
Peer reviewed
 

Files


Full Text
Fsquadra_Zhauniarovich2014.pdf
Author postprint (753.29 kB)
Download

All documents in ORBilu are protected by a user license.

Send to



Details



Keywords :
Android; security; repackaging
Abstract :
[en] The ease of Android applications repackaging and proliferation of application clones in Google Play and other markets call for new effective techniques to detect repackaged code and combat distribution of cloned applications. Today all existing techniques for repackaging detection are based on code similarity or feature (e.g., permission set) similarity evaluation. We propose a new approach to detect repackaging based on the resource files available in application packages. Our tool called FSquaDRA performs a quick pairwise application comparison (full pairwise comparison for 55,000 applications in just 80 hours on a laptop), as it measures how many identical resources are present inside both packages under analysis. The intuition behind our approach is that malicious repackaged applications still need to maintain the “look and feel” of the originals by including the same images and other resource files, even though they might have additional code included or some of the original code removed. To evaluate the reliability of our approach we perform a comparison of the FSquaDRA similarity scores with the code-based similarity scores of AndroGuard for a dataset of randomly selected application pairs, and our results demonstrate strong positive correlation of the FSquaDRA resource-based score with the code-based similarity score.
Research center :
Interdisciplinary Centre for Security, Reliability and Trust (SnT)
Disciplines :
Computer science
Author, co-author :
Zhauniarovich, Yury;  University of Trento
Gadyatskaya, Olga ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) ; CSC/FSTC
Crispo, Bruno;  University of Trento
La Spina, Francesco;  University of Trento
Moser, Ermanno;  University of Trento
External co-authors :
yes
Language :
English
Title :
FSquaDRA: Fast Detection of Repackaged Applications
Publication date :
July 2014
Event name :
28th Annual IFIP WG 11.3 Working Conference on Data and Applications Security and Privacy (DBSec 2014)
Event date :
14-16 July 2014
Audience :
International
Main work title :
Data and Applications Security and Privacy XXVIII
Publisher :
Springer
Collection name :
Lecture Notes in Computer Science Volume 8566
Pages :
130-145
Peer reviewed :
Peer reviewed
Available on ORBilu :
since 02 February 2015

Statistics


Number of views
104 (3 by Unilu)
Number of downloads
644 (9 by Unilu)

Scopus citations®
 
42
Scopus citations®
without self-citations
37
WoS citations
 
30

Bibliography


Similar publications



Contact ORBilu