{"title":"PACS:基于评论挖掘的android应用程序请求滥用检查系统","authors":"Jingzheng Wu, Mutian Yang, Tianyue Luo","doi":"10.1109/DESEC.2017.8073813","DOIUrl":null,"url":null,"abstract":"The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.","PeriodicalId":92346,"journal":{"name":"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...","volume":"1 1","pages":"251-258"},"PeriodicalIF":0.0000,"publicationDate":"2017-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"7","resultStr":"{\"title\":\"PACS: Pemission abuse checking system for android applictions based on review mining\",\"authors\":\"Jingzheng Wu, Mutian Yang, Tianyue Luo\",\"doi\":\"10.1109/DESEC.2017.8073813\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.\",\"PeriodicalId\":92346,\"journal\":{\"name\":\"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...\",\"volume\":\"1 1\",\"pages\":\"251-258\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2017-08-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"7\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/DESEC.2017.8073813\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"DASC-PICom-DataCom-CyberSciTech 2017 : 2017 IEEE 15th International Conference on Dependable, Autonomic and Secure Computing ; 2017 IEEE 15th International Conference on Pervasive Intelligence and Computing ; 2017 IEEE 3rd International...","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/DESEC.2017.8073813","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 7
摘要
Android系统的开放性和自由性促进了Android应用程序的扩散。根据最近的统计,在Google Play Store中发布的各种应用程序超过260万个。遗憾的是,由于开发者知识的限制和缺乏严格的开发规范,应用程序的质量无法得到保证。这可能会导致潜在的安全问题,特别是对于应用程序的权限要求过高,这被称为权限滥用问题。虽然已有一些研究对权限制度进行了分析,对权限模型的有效性进行了考察,试图解决权限滥用问题,但仍然需要一种有效、实用的集中方法来检测权限滥用问题。本文提出了基于数据和频繁项集挖掘技术的权限滥用检查系统PACS (Permission Abuse Checking System),利用应用程序的评论和描述进行改进。PACS首先通过挖掘应用的元数据(如评论、描述等)将应用划分为不同的类别。然后,获取最大频繁项集,构建权限特征库;最后,我们评估了PACS在检测滥用权限的未知应用方面的效果。实验结果显示,935个应用程序中有726个(77.6%)存在权限滥用问题。与以前的工具相比,PACS具有更好的性能。
PACS: Pemission abuse checking system for android applictions based on review mining
The openness and freedom of Android system improve the proliferation of Android applications. According to recent statistics, more than 2.6 million various applications are released in Google Play Store. Unfortunately, due to the limitation of developers' knowledge and the lack of strict development specifications, the quality of the apps can not be guaranteed. This may lead to potential security problems, especially for the over requirements of the apps' permissions, which is called Permission Abuse Problem. Although some previous studies have already analyzed the permission system, investigated the effectiveness of permission model and attempted to resolve the problem, it still needs an effective and practical concentrated method to detect the permission abuse problem. In this paper, we present PACS (Permission Abuse Checking System) based on data and frequent itemsets mining technique to bring an improvement by using the apps' reviews and descriptions. PACS firstly classifies the apps into different categories by mining the apps' meta-data, e.g., the reviews, descriptions, etc. Then, it obtains the maximum frequent itemsets and constructs the permission feature database. Finally, we evaluate PACS on detecting unknown applications of the abused permission. The experiment results show that 726 out of 935 applications, which account for about 77.6%, are suffering from the Permission Abuse Problem. By comparing with the previous tools, PACS has better performances.