arXiv:2508.02008cs.CRcs.LG2025-08被引 12

分析安卓应用权限变化,揭示恶意与正常应用的策略差异。

A Comprehensive Analysis of Evolving Permission Usage in Android Apps: Trends, Threats, and Ecosystem Insights

  • 区分良性和恶意应用,发现恶意程序减少权限请求以逃检测。
  • 通过关联规则挖掘,发现不同应用类型中常见权限组合模式。
  • 为开发者、监管者提供权限滥用风险和隐私保护参考。

Android应用权限的合理使用对应用安全与成功至关重要。用户在安装或运行应用时需同意权限请求。尽管官方文档有规范,但仍存在大量权限滥用现象。本研究对Google Play商店中的各类应用进行了全面分析,揭示了权限请求的趋势与模式。通过区分良性与恶意应用,发现恶意应用正逐步减少权限请求以规避检测,而良性应用则因功能增强而申请更多权限。研究还结合广告、内购、内容评级、应用大小等特征,分析多年来的权限趋势,并利用FP-Growth算法进行关联规则挖掘,识别出全数据集、特定年份及16类应用中的高频权限组合。结果表明不同应用类别间权限使用模式存在显著差异,有助于深入理解权限共现关系及其对用户隐私与应用功能的影响。通过将权限归类为高层语义组并分析其在各应用类别中的分布,本研究提出了一种系统化分析安卓生态动态的方法。研究强调持续监控、用户教育与监管的重要性,以有效应对权限滥用问题。

原文摘要 · Abstract (English)

The proper use of Android app permissions is crucial to the success and security of these apps. Users must agree to permission requests when installing or running their apps. Despite official Android platform documentation on proper permission usage, there are still many cases of permission abuse. This study provides a comprehensive analysis of the Android permission landscape, highlighting trends and patterns in permission requests across various applications from the Google Play Store. By distinguishing between benign and malicious applications, we uncover developers' evolving strategies, with malicious apps increasingly requesting fewer permissions to evade detection, while benign apps request more to enhance functionality. In addition to examining permission trends across years and app features such as advertisements, in-app purchases, content ratings, and app sizes, we leverage association rule mining using the FP-Growth algorithm. This allows us to uncover frequent permission combinations across the entire dataset, specific years, and 16 app genres. The analysis reveals significant differences in permission usage patterns, providing a deeper understanding of co-occurring permissions and their implications for user privacy and app functionality. By categorizing permissions into high-level semantic groups and examining their application across distinct app categories, this study offers a structured approach to analyzing the dynamics within the Android ecosystem. The findings emphasize the importance of continuous monitoring, user education, and regulatory oversight to address permission misuse effectively.

安卓安全权限分析隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。