Checking App Behavior Against App Descriptions
- ICSE 2014
by
Alessandra Gorla, Ilaria Tavecchia, Florian Gross, Andreas Zeller
ICSE '14: Proceedings of the 2014 International Conference on Software Engineering, Pages 292-302, ACM Press, June 2014.
ISBN: 978-1-4503-2756-5
Abstract
How do we know a program does what it claims to do? After clustering Android apps by their description topics, we identify outliers in each cluster with respect to their API usage. A "weather" app that sends messages thus becomes an anomaly; likewise, a "messaging" app would typically not be expected to access the current location. Applied on a set of 22,500+ Android applications, our CHABADA prototype identified several anomalies; additionally, it flagged 56% of novel malware as such, without requiring any known malware patterns.
BibTeX Entry
@inproceedings{gorla-chabadaicse-2014,
title = "Checking App Behavior Against App Descriptions",
author = "Alessandra Gorla and Ilaria Tavecchia and Florian Gross and Andreas Zeller",
year = "2014",
month = jun,
booktitle = "ICSE '14: Proceedings of the 2014 International Conference on Software Engineering",
location = "Hyderabad, India",
pages = "292--302",
publisher = "ACM Press",
ISBN = "978-1-4503-2756-5",
}