Achieving accuracy and scalability simultaneously in detecting application clones on Android markets

Proceedings - International Conference on Software Engineering

Volumn , Issue 1, 2014, Pages 175-186

  Chen, Kai ^a,b   Liu, Peng ^a   Zhang, Yingjun ^c  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b University of Chinese Academy of Sciences   (China)

^c INSTITUTE OF GEOLOGY AND GEOPHYSICS   (China)

Author keywords

Android; centroid; clone detection; Software analysis

Indexed keywords

CLONING; CODES (SYMBOLS); COMMERCE; SCALABILITY; SOFTWARE ENGINEERING;

ANDROID; ANDROID APPLICATIONS; CENTROID; CLONE DETECTION; CORE FUNCTIONALITY; DEPENDENCY GRAPHS; GEOMETRY CHARACTERISTICS; SOFTWARE ANALYSIS;

ANDROID (OPERATING SYSTEM);

EID: 84994101812     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2568225.2568286     Document Type: Conference Paper

References (54)

1. 1mobile. 1mobile android market. http: //www. 1mobile. com/, 2013.
2. Androguard. Reverse engineering, malware and goodware analysis of android applications. and more. http: //code. google. com/p/androguard/, 2013.
3. Anzhi. Anzhi market. http: //www. anzhi. com/, 2013.
4. B. Baker. A program for identifying duplicated code. Computing Science and Statistics, pages 49-49, 1993.
5. B. S. Baker. On finding duplication and near-duplication in large software systems. In Reverse Engineering, 1995., pages 86-95. IEEE, 1995.
6. I. Baxter, A. Yahin, L. Moura, M. Sant'Anna, and L. Bier. Clone detection using abstract syntax trees. In icsm, pages 368-377, 1998.
7. I. D. Baxter, C. Pidgeon, and M. Mehlich. Dms R: Program transformations for practical scalable software evolution. In Proceedings of the 26th International Conference on Software Engineering, pages 625-634. IEEE Computer Society, 2004.
8. K. Chen. A list of shared libraries and ad libraries used in android apps. http: //sites. psu. edu/kaichen/ 2014/02/20/a-list-of-shared-libraries-and-ad-librariesused-in-android-apps.
9. J. Crussell, C. Gibler, and H. Chen. Attack of the clones: Detecting cloned applications on android markets. Computer Security-ESORICS 2012, pages 37-54, 2012.
10. J. Crussell, C. Gibler, and H. Chen. Scalable semantics-based detection of similar android applications. In ESORICS, 2013.
11. Dangle. Dangle. http: //android. d. cn, 2013.
12. J. Ferrante, K. J. Ottenstein, and J. D. Warren. The program dependence graph and its use in optimization. ACM Transactions on Programming Languages and Systems (TOPLAS), 9 (3): 319-349, 1987.
13. M. Gabel, L. Jiang, and Z. Su. Scalable detection of semantic clones. In Proceedings of the 30th international conference on Software engineering, pages 321-330. ACM, 2008.
14. M. Gabel, J. Yang, Y. Yu, M. Goldszmidt, and Z. Su. Scalable and systematic detection of buggy inconsistencies in source code. In ACM Sigplan Notices, volume 45, pages 175-190. ACM, 2010.
15. C. Gibler, R. Stevens, J. Crussell, H. Chen, H. Zang, and H. Choi. Adrob: Examining the landscape and impact of android application plagiarism. In MobiSys, 2013.
16. Google. Google play. https: //play. google. com/store, 2013.
17. S. Hanna, L. Huang, E. Wu, S. Li, C. Chen, and D. Song. Juxtapp: A scalable system for detecting code reuse among android applications. In Proceedings of the 9th Conference on Detection of Intrusions and Malware & Vulnerability Assessment, 2012.
18. D. S. Hirschberg. Algorithms for the longest common subsequence problem. Journal of the ACM (JACM), 24 (4): 664-675, 1977.
19. Y.-C. Jhi, X. Wang, X. Jia, S. Zhu, P. Liu, and D. Wu. Value-based program characterization and its application to software plagiarism detection. In Proceedings of the 33rd International Conference on Software Engineering, pages 756-765. ACM, 2011.
20. L. Jiang, G. Misherghi, Z. Su, and S. Glondu. Deckard: Scalable and accurate tree-based detection of code clones. In Proceedings of the 29th international conference on Software Engineering, pages 96-105. IEEE Computer Society, 2007.
21. E. Juergens, F. Deissenboeck, B. Hummel, and S. Wagner. Do code clones matter? In Proceedings of the 31st International Conference on Software Engineering, pages 485-495. IEEE Computer Society, 2009.
22. T. Kamiya, S. Kusumoto, and K. Inoue. Ccfinder: a multilinguistic token-based code clone detection system for large scale source code. Software Engineering, IEEE Transactions on, 28 (7): 654-670, 2002.
23. H. Kim, Y. Jung, S. Kim, and K. Yi. Mecc: memory comparison-based clone detector. In Software Engineering (ICSE), 2011 33rd International Conference on, pages 301-310. IEEE, 2011.
24. Y.-C. Kim and J. Choi. A program plagiarism evaluation system. ICCSA, pages 221-223, 2005.
25. R. Komondoor and S. Horwitz. Using slicing to identify duplication in source code. Static Analysis, pages 40-56, 2001.
26. M.-W. Lee, J.-W. Roh, S.-w. Hwang, and S. Kim. Instant code clone search. In Proceedings of the eighteenth ACM SIGSOFT international symposium on Foundations of software engineering, pages 167-176. ACM, 2010.
27. J. Li and M. D. Ernst. Cbcd: Cloned buggy code detector. In Software Engineering (ICSE), 2012 34th International Conference on, pages 310-320. IEEE, 2012.
28. Z. Li, S. Lu, S. Myagmar, and Y. Zhou. Cp-miner: A tool for finding copy-paste and related bugs in operating system code. In Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation, volume 6, pages 20-20, 2004.
29. Z. Li, S. Lu, S. Myagmar, and Y. Zhou. Cp-miner: Finding copy-paste and related bugs in large-scale software code. IEEE Transactions on Software Engineering, pages 176-192, 2006.
30. H.-I. Lim, H. Park, S. Choi, and T. Han. A method for detecting the theft of Java programs through analysis of the control flow information. Information and Software Technology, 51 (9): 1338-1350, 2009.
31. C. Liu, C. Chen, J. Han, and P. Yu. Gplag: detection of software plagiarism by program dependence graph analysis. In SIGKDD, pages 872-881, 2006.
32. C. McMillan, M. Grechanik, and D. Poshyvanyk. Detecting similar software applications. In Software Engineering (ICSE), 2012 34th International Conference on, pages 364-374. IEEE, 2012.
33. G. Myles and C. Collberg. Detecting software theft via whole program path birthmarks. Information security, pages 404-415, 2004.
34. G. Myles and C. Collberg. K-gram based software birthmarks. In ACM symposium on Applied computing, 2005.
35. D. Octeau, S. Jha, and P. McDaniel. Retargeting android applications to Java bytecode. In FSE, page 6. ACM, 2012.
36. Opera. Opera software. http: //apps. opera. com, 2013.
37. Pandaapp. Pandaapp download center. http: //download. pandaapp. com, 2013.
38. N. H. Pham, T. T. Nguyen, H. A. Nguyen, and T. N. Nguyen. Detection of recurring software vulnerabilities. In Proceedings of the IEEE/ACM international conference on Automated software engineering, pages 447-456. ACM, 2010.
39. C. Roy and J. Cordy. A survey on software clone detection research. Technical report, Queen's School of Computing TR, 2007.
40. S. Schleimer, D. S. Wilkerson, and A. Aiken. Winnowing: local algorithms for document fingerprinting. In ACM SIGMOD international conference on Management of data, pages 76-85. ACM, 2003.
41. D. Schuler, V. Dallmeier, and C. Lindig. A dynamic birthmark for Java. In Proceedings of the twenty-second IEEE/ACM international conference on Automated software engineering, pages 274-283. ACM, 2007.
42. Slideme. Slideme: Your marketplace for android apps. http: //slideme.org, 2013.
43. smali. An assembler/disassembler for android's dex format. http: //code. google. com/p/smali/, 2013.
44. H. Tamada, M. Nakamura, A. Monden, and K.-I. Matsumoto. Design and evaluation of birthmarks for detecting theft of Java programs. In Proc. IASTED International Conference on Software Engineering (IASTED SE 2004), pages 569-575, 2004.
45. H. Tamada, K. Okamoto, M. Nakamura, A. Monden, and K. Ichi Matsumoto. Design and evaluation of dynamic software birthmarks based on api calls. Info. Science Technical Report NAIST-IS-TR2007011, ISSN, pages 0919-9527, 2007.
46. H. Tamada, K. Okamoto, M. Nakamura, A. Monden, and K.-I. Matsumoto. Dynamic software birthmarks to detect the theft of windows applications. In International Symposium on Future Software Technology, volume 2004, 2004.
47. N. Truong, P. Roe, and P. Bancroft. Static analysis of students' Java programs. In Proceedings of the Sixth Australasian Conference on Computing Education-Volume 30, pages 317-325. Australian Computer Society, Inc., 2004.
48. X. Wang, Y.-C. Jhi, S. Zhu, and P. Liu. Behavior based software theft detection. In Proceedings of the 16th ACM conference on Computer and communications security, pages 280-290. ACM, 2009.
49. Wikipedia. Structured programming. http: //en. wikipedia.org/wiki/Structured programming, 2012.
50. W. Yang. Identifying syntactic differences between two programs. Software: Practice and Experience, 21 (7): 739-755, 2006.
51. F. Zhang, Y.-C. Jhi, D. Wu, P. Liu, and S. Zhu. A first step towards algorithm plagiarism detection. In Proceedings of the 2012 International Symposium on Software Testing and Analysis, pages 111-121. ACM, 2012.
52. W. Zhou, Y. Zhou, M. Grace, X. Jiang, and S. Zou. Fast, scalable detection of piggybacked mobile applications. In CODASPY, pages 185-196. ACM, 2013.
53. W. Zhou, Y. Zhou, X. Jiang, and P. Ning. Detecting repackaged smartphone applications in third-party android marketplaces. In CODASPY, pages 317-326. ACM, 2012.
54. Y. Zhou and X. Jiang. Dissecting android malware: Characterization and evolution. In Security and Privacy (SP), 2012 IEEE Symposium on, pages 95-109. IEEE, 2012.