摘要
随着Android系统的发展,仿冒应用在Android平台出现并逐渐活跃。混淆等技术的普及使得仿冒应用难以被传统的检测方法检测。为了有效抵抗加固技术,提出了一种基于界面相似度的Android仿冒应用检测方法InfSimiDetec。首先通过自动化测试工具提取运行界面的布局信息,接着基于布局信息获取界面结构特征,然后筛选出结构特征相似的界面进行界面相似度计算,最后基于相似界面的比率进行应用相似度计算。使用含有多种类型仿冒应用程序的数据集进行实验并将所提方法与传统的检测方法进行比较,结果表明该方法的准确率为94.11%,召回率为96.12%,与传统检测方法相比表现出更优越的性能。
With the development of the Android,fake applications appear and become active on the Android platform.The popularity of obfuscation and other technologies makes it difficult for fake applications to be detected by traditional detection methods.In order to effectively resist the reinforcement technology,an Android fake application detection method(InfSimiDetec)based on interface similarity is proposed.Firstly,the layout information of the running interface is extracted by the automatic test tool.Next,the interface structural features are extracted based on the layout information.Then the interfaces with similar structural features are selected for interface similarity calculation.Finally,the application similarity calculation is carried out based on the ratio of similar interfaces.Experiments are carried out using a dataset containing multiple types of fake applications and compared with traditional detection methods.The results show that the precision rate of this method is 94.11%and the recall rate is 96.12%.Compared with traditional detection methods,this method shows better performance.
作者
付雄
聂晓晗
王俊昌
FU Xiong;NIE Xiaohan;WANG Junchang(School of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210023,China)
出处
《计算机科学》
CSCD
北大核心
2023年第S01期877-883,共7页
Computer Science
基金
国家自然科学基金(51977113)
江苏省重点研发计划(社会发展)项目(BE2017743)。
关键词
ANDROID
界面布局
仿冒检测
自动化遍历
特征提取
Android
Interface layout
Detection of fake application
Automation traversal of application
Feature extraction