{"id":"https://openalex.org/W1979086041","doi":"https://doi.org/10.1145/2382196.2382316","title":"Detecting money-stealing apps in alternative Android markets","display_name":"Detecting money-stealing apps in alternative Android markets","publication_year":2012,"publication_date":"2012-10-15","ids":{"openalex":"https://openalex.org/W1979086041","doi":"https://doi.org/10.1145/2382196.2382316","mag":"1979086041"},"language":"en","primary_location":{"id":"doi:10.1145/2382196.2382316","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2382196.2382316","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072105113","display_name":"Chao Yang","orcid":"https://orcid.org/0000-0002-3763-5080"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chao Yang","raw_affiliation_strings":["Texas A&M University, College Station, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University, College Station, TX, USA","institution_ids":["https://openalex.org/I91045830"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085002486","display_name":"Vinod Yegneswaran","orcid":"https://orcid.org/0000-0003-0718-6605"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinod Yegneswaran","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA","SRI-International, Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"SRI-International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022253423","display_name":"Phillip Porras","orcid":"https://orcid.org/0000-0003-4661-2443"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillip Porras","raw_affiliation_strings":["SRI International, Menlo Park, USA","SRI, International, Menlo Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"SRI, International, Menlo Park, USA","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058852421","display_name":"Guofei Gu","orcid":"https://orcid.org/0000-0003-0630-741X"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guofei Gu","raw_affiliation_strings":["Texas A&M University, College Station, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University, College Station, TX, USA","institution_ids":["https://openalex.org/I91045830"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.416,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.94008322,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1034","last_page":"1036"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.8269031047821045},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8076910972595215},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7808051705360413},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7218406200408936},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7003390789031982},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6104212403297424},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.607563316822052},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.5262535810470581},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.46933263540267944},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.46128764748573303},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.45285964012145996},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.23265016078948975},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16743338108062744}],"concepts":[{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.8269031047821045},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8076910972595215},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7808051705360413},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7218406200408936},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7003390789031982},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6104212403297424},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.607563316822052},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.5262535810470581},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.46933263540267944},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.46128764748573303},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.45285964012145996},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.23265016078948975},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16743338108062744},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2382196.2382316","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2382196.2382316","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 ACM conference on Computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8100000023841858,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W1963971515","https://openalex.org/W2016346537","https://openalex.org/W2120900307","https://openalex.org/W2166900809","https://openalex.org/W2399891510"],"related_works":["https://openalex.org/W2538622067","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2181494682","https://openalex.org/W2311926078","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W2782775281","https://openalex.org/W4312234627","https://openalex.org/W2895504842"],"abstract_inverted_index":{"The":[0],"prevalence":[1],"of":[2,41,111,121],"malware":[3],"in":[4,79],"Android":[5,23,81,100],"marketplaces":[6],"is":[7],"a":[8,71,130],"growing":[9],"and":[10,56,60,104,128],"significant":[11],"problem.":[12],"Among":[13],"the":[14,39,125],"most":[15],"worrisome":[16],"concerns":[17],"are":[18,57],"with":[19],"regarding":[20],"to":[21,27,45,74,94],"malicious":[22,34],"applications":[24,35,78,123],"that":[25,50,92,119,135],"attempt":[26],"steal":[28],"money":[29,114],"from":[30],"unsuspecting":[31,63],"users.":[32],"These":[33],"get":[36],"uploaded":[37],"under":[38],"guise":[40],"benign":[42],"applications,":[43,116],"typically":[44],"third-party":[46],"alternative":[47],"market":[48],"places":[49],"lack":[51],"proper":[52],"security":[53],"vetting":[54],"procedures,":[55],"subsequently":[58],"downloaded":[59],"executed":[61],"by":[62],"victims.":[64],"In":[65,107],"this":[66,138],"work,":[67],"we":[68,117],"propose":[69],"\"Money-Guard\",":[70],"systematic":[72],"approach":[73,134],"detect":[75],"stealthy":[76],"moneystealing":[77],"popular":[80],"markets.":[82],"Our":[83],"technique":[84],"relies":[85],"on":[86],"detecting":[87],"two":[88],"key":[89],"behavioral":[90,139],"heuristics":[91],"seem":[93],"be":[95],"common":[96],"across":[97],"many":[98],"money-stealing":[99],"malware:":[101],"hardcoded":[102],"exfiltration":[103],"notification":[105],"suppression.":[106],"our":[108],"preliminary":[109],"analysis":[110],"47":[112],"SMS-based":[113],"stealing":[115],"confirm":[118],"41":[120],"these":[122],"follow":[124],"above":[126],"pattern,":[127],"describe":[129],"light":[131],"weight":[132],"detection":[133],"will":[136],"identify":[137],"pattern.":[140]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":10}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}