https://github.com/zyrikby/FSquaDRA
Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
https://github.com/zyrikby/FSquaDRA
android android-security java repackaging-detection research
Last synced: about 1 month ago
JSON representation
Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
- Host: GitHub
- URL: https://github.com/zyrikby/FSquaDRA
- Owner: zyrikby
- Created: 2014-04-30T08:29:45.000Z (almost 11 years ago)
- Default Branch: master
- Last Pushed: 2023-04-01T11:59:18.000Z (about 2 years ago)
- Last Synced: 2024-10-27T23:25:10.097Z (6 months ago)
- Topics: android, android-security, java, repackaging-detection, research
- Language: Java
- Homepage:
- Size: 72.3 KB
- Stars: 71
- Watchers: 6
- Forks: 26
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Citation: CITATION.cff
Awesome Lists containing this project
- awesome-hacking-tools - FSquaDRA - A tool for detection of repackaged Android applications based on app resources hash comparison. (Android Security / Application Repackaging Detectors)
README
# FSquaDRA
## Description
FSquaDRA is a tool for detection of repackaged Android applications. The
approach is based on the idea that repackaged applications want to maintain
"look and feel" of the originals.
Our tool computes Jaccard similarity over the set of digests of files
included into Android package file. We use the digests precomputed during the
application signing, thus, significantly improving the speed of apk comparison.
This work has been done in the University of Trento.
## Publication
The results of our research were presented on the 28th Annual IFIP WG 11.3
Working Conference on Data and Applications Security and Privacy. Please,
use the following bibtex reference to cite our paper:
```
@inproceedings{Fsquadra_Zhauniarovich2014,
author = {Zhauniarovich, Yury and Gadyatskaya, Olga and Crispo, Bruno and La Spina, Francesco and Moser, Ermanno},
title = {{FSquaDRA: Fast Detection of Repackaged Applications}},
booktitle = {Proceedings of the 28th Annual IFIP WG 11.3 Working Conference on Data and Applications Security and Privacy},
series = {DBSec '14},
pages = {131--146},
year = {2014},
}
```
## Usage
We would recommend to build a jar file from the project. In this case, the tool
can be run in the following way:
```
java -jar fsquadra.jar -o=
```
where *path1* is a path to the first apk file or folder with apk files,
*path2* is a path to the second apk file or folder with apk files. The tool
will take all files from the *path1* and compare them pair wise with the files
in *path2*. *path2* may be absent, in this case, FSquaDRA will compare pair
wise all the files inside *path1* folder.
The results of the comparison will be written into *result_file* in csv
format in the following way:
```
apkName1,apkName2,numberOfFilesInApk1,numberOfFilesInApk2,jaccardSimilarity,ifTheCertificatesAreTheSame
```
## Libraries
The tool uses [jCommander](http://jcommander.org/) library to parse command
line arguments.
## License
The tool is distributed under Apache-2.0 license. The citation of the paper is
highly appreciated.