一句话:重新审视 Android 应用自动分类,指出错误分类会误导恶意软件检测等下游工具,并呼吁改进分类质量。
Android 应用自动分类被许多分析工具作为方法学的一部分,但错误分类会导致错误结论。摘要以 SlideIT Free Keyboard 为例:该应用在 Google Play 下载量超过 50 万,本属“Keyboard”类,却因描述侧重语言支持而常被误分为“Language”类,进而被误判为潜在恶意软件,尽管它实际是良性应用。这说明现有分类不可靠,会污染依赖它的分析结果。论文因此重新审视 Android 应用分类,目标是改进分类质量,使所有依赖分类的工具受益。摘要仅给出问题动机与实例,未展开具体方法、实验设计与评估结果。
Numerous tools rely on automatic categorization of Android apps as part of their methodology. However, incorrect categorization can lead to inaccurate outcomes, such as a malware detector wrongly flagging a benign app as malicious. One such example is the SlideIT Free Keyboard app, which has over 500 000 downloads on Google Play. Despite being a "Keyboard" app, it is often wrongly categorized alongside "Language" apps due to the app's description focusing heavily on language support, resulting in incorrect analysis outcomes, including mislabeling it as a potential malware when it is actually a benign app. Hence, there is a need to improve the categorization of Android apps to benefit all the tools relying on it.