Title
AppHolmes: Detecting and Characterizing App Collusion among Third-Party Android Markets.
Abstract
Background activities on smartphones are essential to today's \"always-on\" mobile device experience. Yet, there lacks a clear understanding of the cooperative behaviors among background activities as well as a quantification of the consequences. In this paper, we present the first in-depth study of app collusion, in which one app surreptitiously launches others in the background without user's awareness. To enable the study, we develop AppHolmes, a static analysis tool for detecting app collusion by examining the app binaries. By analyzing 10,000 apps from top third-party app markets, we found that i) covert, cooperative behaviors in background app launch are surprisingly pervasive, ii) most collusion is caused by shared services, libraries, or common interest among apps, and iii) collusion has serious impact on performance, efficiency, and security. Overall, our work presents a strong implication on future mobile system design.
Year
DOI
Venue
2017
10.1145/3038912.3052645
WWW
Keywords
Field
DocType
Program Analysis, Mobile Computing, Community Detection
Mobile computing,World Wide Web,Internet privacy,Android (operating system),Computer security,Computer science,Covert,Third party,Mobile device,Collusion
Conference
Citations 
PageRank 
References 
9
0.44
22
Authors
5
Name
Order
Citations
PageRank
Mengwei Xu1668.32
Yun Ma221620.25
Xuanzhe Liu368957.53
Felix Xiaozhu Lin446228.81
Yunxin Liu569454.18