CLAP: Classification of android PUAs by similarity of DNS queries

Mitsuhiro Hatada; Tatsuya Mori

doi:10.1587/transinf.2019INP0003

CLAP: Classification of android PUAs by similarity of DNS queries

Mitsuhiro Hatada, Tatsuya Mori

基幹理工学部

研究成果: Article › 査読

抄録

This work develops a system called CLAP that detects and classifies "potentially unwanted applications" (PUAs) such as adware or remote monitoring tools. Our approach leverages DNS queries made by apps. Using a large sample of Android apps from third-party marketplaces, we first reveal that DNS queries can provide useful information for detection and classification of PUAs. We then show that existing DNS blacklists are limited when performing these tasks. Finally, we demonstrate that the CLAP system performs with high accuracy.

本文言語	English
ページ（範囲）	265-275
ページ数	11
ジャーナル	IEICE Transactions on Information and Systems
巻	E103D
号	2
DOI	https://doi.org/10.1587/transinf.2019INP0003
出版ステータス	Published - 2020

ASJC Scopus subject areas

ソフトウェア
ハードウェアとアーキテクチャ
コンピュータビジョンおよびパターン認識
電子工学および電気工学
人工知能

文献へのアクセス

10.1587/transinf.2019INP0003

他のファイルとリンク

引用スタイル

@article{0f277990d7b945768c566bd8138cd889,

title = "CLAP: Classification of android PUAs by similarity of DNS queries",

abstract = "This work develops a system called CLAP that detects and classifies {"}potentially unwanted applications{"} (PUAs) such as adware or remote monitoring tools. Our approach leverages DNS queries made by apps. Using a large sample of Android apps from third-party marketplaces, we first reveal that DNS queries can provide useful information for detection and classification of PUAs. We then show that existing DNS blacklists are limited when performing these tasks. Finally, we demonstrate that the CLAP system performs with high accuracy.",

keywords = "Classification, DNS query, PUA, PUP, Potentially unwanted",

author = "Mitsuhiro Hatada and Tatsuya Mori",

note = "Funding Information: A part of this work was supported by JSPS Grant-in-Aid for Scientific Research B, Grant Number 16H02832. We thank Mr. Yuta Ishii and Mr. Sho Mizuno for collecting valuable datasets. Publisher Copyright: {\textcopyright} 2020 Institute of Electronics, Information and Communication, Engineers, IEICE. All rights reserved.",

year = "2020",

doi = "10.1587/transinf.2019INP0003",

language = "English",

volume = "E103D",

pages = "265--275",

journal = "IEICE Transactions on Information and Systems",

issn = "0916-8532",

publisher = "Maruzen Co., Ltd/Maruzen Kabushikikaisha",

number = "2",

}

TY - JOUR

T1 - CLAP

T2 - Classification of android PUAs by similarity of DNS queries

AU - Hatada, Mitsuhiro

AU - Mori, Tatsuya

N1 - Funding Information: A part of this work was supported by JSPS Grant-in-Aid for Scientific Research B, Grant Number 16H02832. We thank Mr. Yuta Ishii and Mr. Sho Mizuno for collecting valuable datasets. Publisher Copyright: © 2020 Institute of Electronics, Information and Communication, Engineers, IEICE. All rights reserved.

PY - 2020

Y1 - 2020

N2 - This work develops a system called CLAP that detects and classifies "potentially unwanted applications" (PUAs) such as adware or remote monitoring tools. Our approach leverages DNS queries made by apps. Using a large sample of Android apps from third-party marketplaces, we first reveal that DNS queries can provide useful information for detection and classification of PUAs. We then show that existing DNS blacklists are limited when performing these tasks. Finally, we demonstrate that the CLAP system performs with high accuracy.

AB - This work develops a system called CLAP that detects and classifies "potentially unwanted applications" (PUAs) such as adware or remote monitoring tools. Our approach leverages DNS queries made by apps. Using a large sample of Android apps from third-party marketplaces, we first reveal that DNS queries can provide useful information for detection and classification of PUAs. We then show that existing DNS blacklists are limited when performing these tasks. Finally, we demonstrate that the CLAP system performs with high accuracy.

KW - Classification

KW - DNS query

KW - PUA

KW - PUP

KW - Potentially unwanted

UR - http://www.scopus.com/inward/record.url?scp=85081680622&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85081680622&partnerID=8YFLogxK

U2 - 10.1587/transinf.2019INP0003

DO - 10.1587/transinf.2019INP0003

M3 - Article

AN - SCOPUS:85081680622

SN - 0916-8532

VL - E103D

SP - 265

EP - 275

JO - IEICE Transactions on Information and Systems

JF - IEICE Transactions on Information and Systems

IS - 2

ER -

CLAP: Classification of android PUAs by similarity of DNS queries

抄録

ASJC Scopus subject areas

文献へのアクセス

他のファイルとリンク

フィンガープリント

引用スタイル