{"id":"https://openalex.org/W4293782987","doi":"https://doi.org/10.56553/popets-2022-0101","title":"Analyzing the Monetization Ecosystem of Stalkerware","display_name":"Analyzing the Monetization Ecosystem of Stalkerware","publication_year":2022,"publication_date":"2022-08-31","ids":{"openalex":"https://openalex.org/W4293782987","doi":"https://doi.org/10.56553/popets-2022-0101"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2022-0101","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0101","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0101.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2022/popets-2022-0101.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077938613","display_name":"Cassidy Gibson","orcid":"https://orcid.org/0009-0002-9173-3359"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Cassidy Gibson","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076806890","display_name":"Vanessa Frost","orcid":null},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vanessa Frost","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068384181","display_name":"Katie Platt","orcid":null},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Katie Platt","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062232064","display_name":"Washington Garc\u00eda","orcid":null},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Washington Garcia","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075233107","display_name":"Luis Vargas","orcid":null},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luis Vargas","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085837723","display_name":"Sara Rampazzi","orcid":"https://orcid.org/0000-0002-3630-6269"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sara Rampazzi","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014689112","display_name":"Vincent Bindschaedler","orcid":"https://orcid.org/0000-0002-3066-7354"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vincent Bindschaedler","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048941759","display_name":"Patrick Traynor","orcid":"https://orcid.org/0000-0002-7143-5189"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick Traynor","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039485542","display_name":"Kevin Butler","orcid":"https://orcid.org/0000-0002-7498-4239"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Butler","raw_affiliation_strings":["University of Florida","University of Florida,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"University of Florida,","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5077938613"],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":2.23,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.90335789,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"2022","issue":"4","first_page":"105","last_page":"119"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9857000112533569,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/monetization","display_name":"Monetization","score":0.9812582731246948},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.676522433757782},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6411051154136658},{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.6353923082351685},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6182218790054321},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.5053156018257141},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5012056827545166},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4653964936733246},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.44937941431999207},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.4230268895626068},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4167567789554596},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.33865976333618164}],"concepts":[{"id":"https://openalex.org/C2780602052","wikidata":"https://www.wikidata.org/wiki/Q289845","display_name":"Monetization","level":2,"score":0.9812582731246948},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.676522433757782},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6411051154136658},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.6353923082351685},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6182218790054321},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.5053156018257141},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5012056827545166},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4653964936733246},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.44937941431999207},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.4230268895626068},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4167567789554596},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.33865976333618164},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2022-0101","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0101","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0101.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2022-0101","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2022-0101","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0101.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2941024203","display_name":null,"funder_award_id":"CNS-1562485","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5998541152","display_name":"TWC: Small: Designing Strong End-to-End Authentication Mechanisms for Modern Telephony Systems","funder_award_id":"1617474","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7260328751","display_name":"TWC: Medium: Digital Healthcare-Associated Infection: Measurement, Defense and Prevention in a Modern Digital Healthcare Ecosystem","funder_award_id":"1562485","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8300793707","display_name":"SaTC: CORE: Medium: Countering Surveillanceware Using Deception-Based Generative Models and Systems Mechanisms","funder_award_id":"2055123","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4293782987.pdf","grobid_xml":"https://content.openalex.org/works/W4293782987.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W1591367040","https://openalex.org/W1963971515","https://openalex.org/W1985987493","https://openalex.org/W2114275288","https://openalex.org/W2121252355","https://openalex.org/W2128217000","https://openalex.org/W2794995912","https://openalex.org/W2913823566","https://openalex.org/W2968816448","https://openalex.org/W2981456243","https://openalex.org/W2982266057","https://openalex.org/W2985186227","https://openalex.org/W2994833092","https://openalex.org/W3015248122","https://openalex.org/W3019867435","https://openalex.org/W3029022248","https://openalex.org/W3049539418","https://openalex.org/W3125759795","https://openalex.org/W3161583595","https://openalex.org/W4237150269","https://openalex.org/W4385979550","https://openalex.org/W6678985388","https://openalex.org/W6750221252","https://openalex.org/W6787748480"],"related_works":["https://openalex.org/W4385624493","https://openalex.org/W4319430541","https://openalex.org/W3017054987","https://openalex.org/W4313416701","https://openalex.org/W4317927411","https://openalex.org/W4299984282","https://openalex.org/W2805704668","https://openalex.org/W2323028880","https://openalex.org/W2149928749","https://openalex.org/W4255382767"],"abstract_inverted_index":{"Stalkerware":[0,98],"is":[1,221],"a":[2,29,160,215],"form":[3],"of":[4,12,79,90,119,149,189,200],"malware":[5],"that":[6,106,121,129,142,181,197,206],"allows":[7],"for":[8,25,228],"the":[9,53,56,74,82,87,95,167,174,190,198,225],"abusive":[10],"monitoring":[11],"intimate":[13],"partners.":[14],"Primarily":[15],"deployed":[16],"on":[17,173,213],"information-rich":[18],"mobile":[19],"platforms,":[20],"these":[21,155,182],"malicious":[22],"applications":[23,92],"allow":[24],"collecting":[26],"information":[27],"about":[28],"victim\u2019s":[30],"actions":[31],"and":[32,42,202],"behaviors,":[33],"including":[34],"location":[35],"data,":[36],"call":[37],"audio,":[38],"text":[39],"messages,":[40],"photos,":[41],"other":[43,163],"personal":[44],"details.":[45],"While":[46],"stalkerware":[47,60,83,110],"has":[48],"received":[49],"increased":[50],"attention":[51],"from":[52,133],"security":[54],"community,":[55],"ways":[57],"in":[58,69,186],"which":[59],"authors":[61],"monetize":[62],"their":[63,101,147],"efforts":[64],"have":[65,211],"not":[66,153],"been":[67],"explored":[68],"depth.":[70],"This":[71],"paper":[72],"represents":[73],"first":[75],"large-scale":[76],"technical":[77],"analysis":[78],"monetization":[80,102],"within":[81],"ecosystem.":[84],"We":[85,104,126],"analyze":[86],"code":[88],"base":[89],"6,432":[91],"collected":[93],"by":[94],"Coalition":[96],"Against":[97],"to":[99,137,146,162,223],"determine":[100],"strategies.":[103],"find":[105,128,196],"while":[107,166,207],"far":[108],"fewer":[109],"apps":[111,168,183],"use":[112,123],"ad":[113],"libraries":[114],"than":[115],"normal":[116],"apps,":[117],"99%":[118],"those":[120],"do":[122],"Google":[124],"AdMob.":[125],"also":[127],"payment":[130,164,203],"services":[131],"range":[132],"traditional":[134],"in-app":[135],"billing":[136],"cryptocurrency.":[138],"Finally,":[139],"we":[140,177,195],"demonstrate":[141],"Google\u2019s":[143],"recent":[144],"change":[145],"Terms":[148],"Service":[150],"(ToS)":[151],"did":[152],"eliminate":[154],"applications,":[156],"but":[157],"instead":[158],"caused":[159],"shift":[161],"processors,":[165],"can":[169,210],"still":[170],"be":[171],"found":[172],"Play":[175],"Store;":[176],"verify":[178],"through":[179],"emulation":[180],"often":[184],"operate":[185],"blatant":[187],"contravention":[188],"ToS.":[191],"Through":[192],"this":[193],"analysis,":[194],"heterogeneity":[199],"markets":[201],"processors":[204],"means":[205],"point":[208],"solutions":[209],"impact":[212],"monetization,":[214],"multi-pronged":[216],"solution":[217],"involving":[218],"multiple":[219],"stakeholders":[220],"necessary":[222],"mitigate":[224],"financial":[226],"incentive":[227],"developing":[229],"stalkerware.":[230]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}