Title
CloneSpot: Fast detection of Android repackages.
Abstract
Repackaging of applications is one of the key attack vectors for mobile malware. This is particularly easy and popular in Android Markets, where applications can be downloaded, decompiled, modified and re-uploaded at a very low cost. Detecting clones and victims is often a hard task, especially in markets with several million of applications to analyze, such as Google Play Store. This work proposes CloneSpot, a novel methodology to efficiently detect Repackaged versions of Android apps using Min-Hashing techniques applied to applications’ meta-data publicly available at Google Play. We validate our approach by analyzing 1.3 Million of applications collected from Google Play in September 2017, from which around 420K are detected as potential repackaged or victim versions of other applications.
Year
DOI
Venue
2019
10.1016/j.future.2018.12.050
Future Generation Computer Systems
Keywords
Field
DocType
Android Malware,Repackaging,Min-Hashing,Meta-information
Mobile malware,Android (operating system),Repackaging,Computer science,Operating system,Distributed computing
Journal
Volume
ISSN
Citations 
94
0167-739X
0
PageRank 
References 
Authors
0.34
0
2
Name
Order
Citations
PageRank
Ignacio Martin1164.40
José Alberto Hernández213124.49