DAPANDA: detecting aggressive push notifications in Android apps

Tianming Liu, Haoyu Wang, Li Li, Guangdong Bai, Yao Guo, Guoai Xu

Research output: Chapter in Book/Report/Conference proceedingConference PaperResearchpeer-review

6 Citations (Scopus)

Abstract

Mobile push notifications have been widely used in mobile platforms to deliver all sorts of information to app users. Although it offers great convenience for both app developers and mobile users, this feature was frequently reported to serve malicious and aggressive purposes, such as delivering annoying push notification advertisement. However, to the best of our knowledge, this problem has not been studied by our research community so far. To fill the void, this paper presents the first study to detect aggressive push notifications and further characterize them in the global mobile app ecosystem on a large scale. To this end, we first provide a taxonomy of mobile push notifications and identify the aggressive ones using a crowdsourcing-based method. Then we propose sc DaPanda, a novel hybrid approach, aiming at automatically detecting aggressive push notifications in Android apps. sc DaPanda leverages a guided testing approach to systematically trigger and record push notifications. By instrumenting the Android framework, sc DaPanda further collects all notification-relevant runtime information to flag the aggressive ones. Our experimental results show that sc DaPanda is capable of detecting different types of aggressive push notifications effectively in an automated way. By applying sc DaPanda to 20,000 Android apps from different app markets, it yields over 1,000 aggressive notifications, which have been further confirmed as true positives. Our in-depth analysis further reveals that aggressive notifications are prevalent across different markets and could be manifested in all the phases in the lifecycle of push notifications. It is hence urgent for our community to take actions to detect and mitigate apps involving aggressive push notifications.

Original languageEnglish
Title of host publicationProceedings - 2019 34th IEEE/ACM International Conference on Automated Software Engineering, ASE 2019
EditorsJulia Lawall, Darko Marinov
Place of PublicationPiscataway NJ USA
PublisherIEEE, Institute of Electrical and Electronics Engineers
Pages66-78
Number of pages13
ISBN (Electronic)9781728125084
ISBN (Print)9781728125091
DOIs
Publication statusPublished - 2019
EventAutomated Software Engineering Conference 2019 - San Diego, United States of America
Duration: 10 Nov 201915 Nov 2019
Conference number: 34th
https://2019.ase-conferences.org/ (Conference website)
https://dl.acm.org/doi/proceedings/10.5555/3382508 (Proceedings)

Publication series

NameProceedings - 2019 34th IEEE/ACM International Conference on Automated Software Engineering, ASE 2019
PublisherThe Institute of Electrical and Electronics Engineers, Inc.
ISSN (Print)1938-4300
ISSN (Electronic)2643-1572

Conference

ConferenceAutomated Software Engineering Conference 2019
Abbreviated titleASE 2019
CountryUnited States of America
CitySan Diego
Period10/11/1915/11/19
Internet address

Keywords

  • Advertisement
  • Android
  • Dynamic analysis
  • Mobile app
  • Push notification

Cite this