PACS:基于评论挖掘的android应用程序请求滥用检查系统

Jingzheng Wu, Mutian Yang, Tianyue Luo
{"title":"PACS:基于评论挖掘的android应用程序请求滥用检查系统","authors":"Jingzheng Wu, Mutian Yang, Tianyue Luo","doi":"10.1109/DESEC.2017.8073813","DOIUrl":null,"url":null,"abstract":"The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.","PeriodicalId":92346,"journal":{"name":"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...","volume":"1 1","pages":"251-258"},"PeriodicalIF":0.0000,"publicationDate":"2017-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"7","resultStr":"{\"title\":\"PACS: Pemission abuse checking system for android applictions based on review mining\",\"authors\":\"Jingzheng Wu, Mutian Yang, Tianyue Luo\",\"doi\":\"10.1109/DESEC.2017.8073813\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.\",\"PeriodicalId\":92346,\"journal\":{\"name\":\"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...\",\"volume\":\"1 1\",\"pages\":\"251-258\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2017-08-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"7\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/DESEC.2017.8073813\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/DESEC.2017.8073813","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 7

摘要

Android系统的开放性和自由性促进了Android应用程序的扩散。根据最近的统计,在Google Play Store中发布的各种应用程序超过260万个。遗憾的是,由于开发者知识的限制和缺乏严格的开发规范,应用程序的质量无法得到保证。这可能会导致潜在的安全问题,特别是对于应用程序的权限要求过高,这被称为权限滥用问题。虽然已有一些研究对权限制度进行了分析,对权限模型的有效性进行了考察,试图解决权限滥用问题,但仍然需要一种有效、实用的集中方法来检测权限滥用问题。本文提出了基于数据和频繁项集挖掘技术的权限滥用检查系统PACS (Permission Abuse Checking System),利用应用程序的评论和描述进行改进。PACS首先通过挖掘应用的元数据(如评论、描述等)将应用划分为不同的类别。然后,获取最大频繁项集,构建权限特征库;最后,我们评估了PACS在检测滥用权限的未知应用方面的效果。实验结果显示,935个应用程序中有726个(77.6%)存在权限滥用问题。与以前的工具相比,PACS具有更好的性能。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
PACS: Pemission abuse checking system for android applictions based on review mining
The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信