基于代码克隆检测技术的Android应用重打包检测

随着智能移动设备的流行和普及,移动应用得到了飞速发展.这些移动应用带来了丰富的功能和友好的用户体验,同时也带来一些安全和隐私问题.恶意的开发者或者剽窃者可以破解已经发布的应用程序,并且在应用中植入恶意代码或者替换掉原有的广告库之后,重新打包应用程序并发布在应用市场中.重打包的应用不仅侵害了原开发者的知识版权和利益,同时也对移动用户的安全和隐私造成危害.本文提出了一种基于代码克隆检测技术的Android应用重打包检测方法并且实现了该方法的一个原型系统.实验证明本系统具有很好的准确性和可扩展性,能够用于应用市场级别的大规模应用重打包检测.

Detecting repackaged Android applications based on code clone detection technique

With the popularity of smart phones,mobile applications are growing rapidly,especially the Android applications. These applications not only provide useful features,but also bring security and privacy issues. The plagiarist can easily crack the legitimate applications,add malicious code or change the existing libraries,and advertise them in various third-party markets. The repackaged applications not only compromise the copyright of the original authors,but also weaken the security and privacy of users. In this paper,we propose an accurate and scalable approach to detect repackaged android applications and implement a prototype system. We use the system to study more than 14,500 applications collected from Google Play market and various third-party markets. The results demonstrate the efectiveness and scalability of our approach.