Forgotten Permission Usages: An Empirical Study on App Description Based Android App Analysis

Wu Zhiqiang (오지강); Scott Uk-Jin Lee

doi:10.9708/jksci.2021.26.06.107

Forgotten Permission Usages: An Empirical Study on App Description Based Android App Analysis

Journal of The Korea Society of Computer and Information
Abbr : JKSCI
2021, 26(6), pp.107-113
DOI : 10.9708/jksci.2021.26.06.107
Publisher : The Korean Society Of Computer And Information
Research Area : Engineering > Computer Science
Received : May 11, 2021
Accepted : June 9, 2021
Published : June 30, 2021

Wu Zhiqiang ¹, Scott Uk-Jin Lee ¹

¹한양대학교

Accredited

ABSTRACT

In this paper, we conducted an empirical study to investigate whether Android app descriptions provide enough permission usages for measuring app quality in terms of human writing and consistency between code and descriptions. Android app descriptions are analyzed for various purposes such as quality measurement, functionality recommendation, and malware detection. However, many app descriptions do not disclose permission usages, whether accidentally or on purpose. Most importantly, the previous studies could not precisely analyze app descriptions if permission usages cannot be completely introduced in app descriptions. To assess the consistency between permissions and app descriptions, we implemented a state-of-the-art method to predict Android permissions for 29,270 app descriptions. As a result, 25% of app descriptions may not contain any permission semantic, and 57% of app descriptions cannot accurately reflect permission usages.

KEYWORDS

Android, App Description, Permission Semantics, Empirical Study, Natural Language Processing

Citation status

* References for papers published after 2023 are currently being built.

[confproc] C. Zhang / 2018 / Re-checking App Behavior against App Description in the Context of Third-party Libraries / Proceeding of International Conference on Software Engineering and Knowledge Engineering

[journal] A. A. Subaihin / 2019 / Empirical Comparison of Text-based Mobile Apps Similarity Measurement Techniques / Empirical Software Engineering 24 : 3290~3315

[web] / Privacy, deception and device abuse / https://support.google.com/googleplay/android-developer/topic/9877467

[journal] J. Xiao / 2020 / An android application risk evaluation framework based on minimum permission set identification / Journal of Systems and Software 163 : 110533~

[confproc] L. Yu / 2016 / Revisiting the description-to-behavior fidelity in android applications / Proceedings of IEEE International Conference on Software Analysis, Evolution, and Reengineering : 415~426

[confproc] M. Shamsujjoha / 2021 / Checking app behavior against app descriptions : What if there are no app descriptions? / Proceedings of International Conference on Program Comprehension, pp : 422~432

[journal] Z. Wu / 2021 / FCDP : Fidelity Calculation for Description-to-Permissions in Android Apps / IEEE Access 9 : 1062~1075

[confproc] T. Watanabe / 2015 / Understanding the inconsistencies between text descriptions and the use of privacy-sensitive resources of mobile apps / Proceedings of Symposium On Usable Privacy and Security : 241~255

[confproc] R. Pandita / 2013 / WHYPER:Towards automating risk assessment of mobile applications / Proceedings of USENIX Security Symposium : 527~542

[confproc] Z. Qu / 2014 / Autocog: Measuring the description-to-permission fidelity in android applications / Proceedings of ACM Conference on Computer and Communications Security : 1354~1365

[confproc] A. Gorla / 2014 / Checking app behavior against app descriptions / Proceedings of International Conference on Software Engineering : 1025~1035

[web] / Compact language detector / https://github.com/google/cld3

[confproc] K. Allix / 2016 / Androzoo : Collecting millions of android apps for the research community / Proceedings of International Conference on Mining Software Repositories : 468~471

[web] / AndroGuard / https://github.com/androguard/androguard

[journal] Y. Feng / 2019 / AC-Net : Assessing the Consistency of Description and Permission in Android Apps / IEEE Access 7 : 57829~57842

[journal] H. Alecakir / 2021 / Attention : there is an inconsistency between android permissions and application metadata! / International Journal of Information Security : 1~19

[confproc] Y. Hu / 2021 / CHAMP : Characterizing Undesired App Behaviors from User Comments based on Market Policies / Proceedings of IEEE/ACM International Conference on Software Engineering : 933~945

[journal] A. A. Subaihin / 2019 / Empirical Comparison of Text-based Mobile Apps Similarity Measurement Techniques / Empirical Software Engineering 24 : 3290~3315

[confproc] H. Wu / 2021 / Identifying Key Features from App User Reviews / Proceedings of International Conference on Software Engineering : 922~932

[confproc] F. H. Shezan / 2020 / TKPERM : Cross-platform Permission Knowledge Transfer to Detect Overprivileged Third-party Applications / Proceedings of Network and Distributed Systems Security Symposium : 1~15

[journal] O. Olukoya / 2020 / Security-oriented View of App Behavior using Textual Descriptions and User-granted Permission Requests / Computers & Security 89 : 1~18

[confproc] Z. Wu / 2019 / Permissions based Automatic Android Malware Repair using Long Short-Term Memory / Proceedings of the Korean Society of Computer Information Conference : 387~388

[confproc] Z. Wu / 2019 / Identifying Latent Android Malware from Application's Description using LSTM / Proceedings of International Conference on Information, System and Convergence Applications : 40~42

This paper was written with support from the National Research Foundation of Korea.

KJCKorea
Journal Central

Journal of The Korea Society of Computer and Information 2023 KCI Impact Factor : 0.65

Forgotten Permission Usages: An Empirical Study on App Description Based Android App Analysis

ABSTRACT

KEYWORDS

Citation status

* References for papers published after 2023 are currently being built.

Journal of The Korea Society of Computer and Information 2023 KCI Impact Factor : 0.65

Forgotten Permission Usages: An Empirical Study on App Description Based Android App Analysis

ABSTRACT

KEYWORDS

Statistics

Tools

Issue List

Citation status

KCI Citation Counts (1)

REFERENCES (23) * References for papers published after 2023 are currently being built.

Search PDF

Citation

* References for papers published after 2023 are currently being built.