{"id":"https://openalex.org/W4384154425","doi":"https://doi.org/10.1145/3597926.3598051","title":"DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity","display_name":"DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity","publication_year":2023,"publication_date":"2023-07-12","ids":{"openalex":"https://openalex.org/W4384154425","doi":"https://doi.org/10.1145/3597926.3598051"},"language":"en","primary_location":{"id":"doi:10.1145/3597926.3598051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597926.3598051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100345062","display_name":"Zhuo Chen","orcid":"https://orcid.org/0000-0001-9991-6892"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuo Chen","raw_affiliation_strings":["Zhejiang University, China / Ant Group, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China / Ant Group, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346062","display_name":"Jie Liu","orcid":"https://orcid.org/0009-0008-1970-8347"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jie Liu","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114973765","display_name":"Yubo Hu","orcid":"https://orcid.org/0009-0008-3580-0098"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Hu","raw_affiliation_strings":["Xidian University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065178474","display_name":"Lei Wu","orcid":"https://orcid.org/0000-0003-1675-5283"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Wu","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088790914","display_name":"Yajin Zhou","orcid":"https://orcid.org/0000-0001-7610-4736"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajin Zhou","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101935489","display_name":"Yiling He","orcid":"https://orcid.org/0000-0002-5977-1489"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiling He","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026729033","display_name":"Xianhao Liao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xianhao Liao","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001578135","display_name":"Ke Wang","orcid":"https://orcid.org/0000-0003-0844-5023"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ke Wang","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102839957","display_name":"Jinku Li","orcid":"https://orcid.org/0000-0003-0709-7434"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinku Li","raw_affiliation_strings":["Xidian University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043524348","display_name":"Zhan Qin","orcid":"https://orcid.org/0000-0001-7872-6969"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhan Qin","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"223","last_page":"235"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9818999767303467,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7775481939315796},{"id":"https://openalex.org/keywords/ground-truth","display_name":"Ground truth","score":0.636784017086029},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5790919661521912},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5300790071487427},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47972336411476135},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.4517301321029663},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.4475800693035126},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4197332262992859},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41107070446014404},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37852707505226135},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2804277539253235},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09165593981742859}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7775481939315796},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.636784017086029},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5790919661521912},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5300790071487427},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47972336411476135},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4517301321029663},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.4475800693035126},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4197332262992859},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41107070446014404},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37852707505226135},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2804277539253235},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09165593981742859},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597926.3598051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3597926.3598051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1803704698","display_name":null,"funder_award_id":"62072395","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2511910633","display_name":null,"funder_award_id":"62172360","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3848079773","display_name":null,"funder_award_id":"U21A20464","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3935748781","display_name":null,"funder_award_id":"U20A20178","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4154949110","display_name":null,"funder_award_id":"U21A20467","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5219413424","display_name":null,"funder_award_id":"2020AAA0107705","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5848059747","display_name":null,"funder_award_id":"2022YFE0113200","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7216113431","display_name":null,"funder_award_id":"U21A20467","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G8753622371","display_name":null,"funder_award_id":"2020AAA0107705","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G983674352","display_name":null,"funder_award_id":"No. 2022YFE0113200","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W1536265389","https://openalex.org/W1549078933","https://openalex.org/W2003276999","https://openalex.org/W2020781526","https://openalex.org/W2107697055","https://openalex.org/W2110889728","https://openalex.org/W2111525908","https://openalex.org/W2163931946","https://openalex.org/W2164170598","https://openalex.org/W2765490659","https://openalex.org/W2792310543","https://openalex.org/W2808617203","https://openalex.org/W2810072569","https://openalex.org/W2885070483","https://openalex.org/W2911282308","https://openalex.org/W2913273467","https://openalex.org/W2925709178","https://openalex.org/W2945827377","https://openalex.org/W2953461273","https://openalex.org/W2962992787","https://openalex.org/W2963580354","https://openalex.org/W2984951742","https://openalex.org/W3000438717","https://openalex.org/W3012614932","https://openalex.org/W3096074535","https://openalex.org/W3097394933","https://openalex.org/W3097730806","https://openalex.org/W3101553402","https://openalex.org/W3194896961","https://openalex.org/W4213069590","https://openalex.org/W4234590960","https://openalex.org/W4238891647","https://openalex.org/W4240601173","https://openalex.org/W4243684882","https://openalex.org/W4249402564","https://openalex.org/W4251541794","https://openalex.org/W4288057701","https://openalex.org/W4381744002"],"related_works":["https://openalex.org/W2366107444","https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W4388145910","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W2032548952"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"the":[3,9,86,99,112,127,157,168,179,191,197,207,217,226],"underground":[4,13],"economy":[5,14],"is":[6],"proliferating":[7],"in":[8,26,175,190,196],"mobile":[10],"system.":[11],"These":[12],"apps":[15,108,166,189,195],"(UEware":[16],"for":[17],"short)":[18],"make":[19],"profits":[20],"from":[21],"providing":[22],"non-compliant":[23],"services,":[24],"especially":[25],"sensitive":[27],"areas":[28],"(e.g.,":[29],"gambling,":[30],"porn,":[31],"loan).":[32],"Unlike":[33],"traditional":[34,158],"malware,":[35],"most":[36],"of":[37,120,172,210],"them":[38],"(over":[39],"80%)":[40],"do":[41],"not":[42],"have":[43,220],"malicious":[44],"payloads.":[45],"Due":[46],"to":[47,71,97],"their":[48,79],"unique":[49],"characteristics,":[50],"existing":[51],"detection":[52,146,174],"approaches":[53],"cannot":[54],"effectively":[55,72],"and":[56,73,91,109,138,148,170,193,212,225],"efficiently":[57,74],"mitigate":[58],"this":[59,64],"emerging":[60],"threat.":[61],"To":[62,101,215],"address":[63],"problem,":[65],"we":[66,89,104,219],"propose":[67],"a":[68,93,152],"novel":[69],"approach":[70],"detect":[75],"UEware":[76,173,184],"by":[77],"considering":[78],"UI":[80,136],"transition":[81],"graphs":[82],"(UTGs).":[83],"Based":[84],"on":[85,126,206],"proposed":[87],"approach,":[88],"design":[90],"implement":[92],"system,":[94],"named":[95],"DeUEDroid,":[96,103],"perform":[98],"detection.":[100],"evaluate":[102],"collect":[105],"25,":[106],"717":[107],"build":[110],"up":[111],"first":[113],"large-scale":[114],"ground-truth":[115,128],"dataset":[116,129,227],"(1,":[117],"700":[118],"apps)":[119],"UEware.":[121,201,214],"The":[122,160],"evaluation":[123,161],"result":[124,162,180],"based":[125],"shows":[130],"that":[131,183],"DeUEDroid":[132],"can":[133],"cover":[134],"new":[135],"features":[137],"statically":[139],"construct":[140],"precise":[141],"UTG.":[142],"It":[143],"achieves":[144],"98.22%":[145],"F1-score":[147],"98.97%":[149],"classification":[150],"accuracy,":[151],"significantly":[153],"better":[154],"performance":[155],"than":[156],"approaches.":[159],"involving":[163],"24,":[164],"017":[165],"demonstrates":[167],"effectiveness":[169],"efficiency":[171],"real-world":[176],"scenarios.":[177],"Furthermore,":[178],"also":[181],"reveals":[182],"are":[185,200],"prevalent,":[186],"i.e.,":[187],"54%":[188],"wild":[192],"11%":[194],"app":[198],"stores":[199],"Our":[202],"work":[203,209],"sheds":[204],"light":[205],"future":[208],"analyzing":[211],"detecting":[213],"engage":[216],"community,":[218],"made":[221],"our":[222],"prototype":[223],"system":[224],"available":[228],"online.":[229]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}