A Large Scale Investigation of Obfuscation Use in Google Play

by   Dominik Wermke, et al.

Android applications are frequently plagiarized or maliciously repackaged, and software obfuscation is a popular protection against these practices. In this study, we present the first comprehensive analysis of the use and challenges of software obfuscation in Android applications. We surveyed 308 Google Play developers about their experiences with obfuscation, finding that the free ProGuard software is by far the most commonly used obfuscation tool. With this insight, we analyzed 1.7 million Android apps from Google Play, finding that only 24.9 is surprising, given that the most common integrated development environment for Android, Android Studio, includes ProGuard by default. We investigated root causes of this low rate of obfuscation in an in-depth study with 79 Google Play developers, assessing their experiences with obfuscation and asking them to obfuscate a sample app using ProGuard. We found that while developers feel that apps in general are at risk of malicious repackaging or plagiarism, they do not fear theft of their own intellectual property. Developers also report difficulties applying obfuscation for their own apps, which was substantiated when they demonstrated problems with all but the most basic configurations to obfuscate our sample app. Our findings indicate that more work is needed to make the application of obfuscation more usable and to educate developers on the risk of their apps being reverse engineered, their intellectual property stolen and their apps being repackaged and redistributed as malware.


page 1

page 2

page 3

page 4


Beyond Google Play: A Large-Scale Comparative Study of Chinese Android App Markets

China is one of the largest Android markets in the world. As Chinese use...

Understanding Android Obfuscation Techniques: A Large-Scale Investigation in the Wild

In this paper, we seek to better understand Android obfuscation and depi...

Unblind Your Apps: Predicting Natural-Language Labels for Mobile GUI Components by Deep Learning

According to the World Health Organization(WHO), it is estimated that ap...

From Ancient Contemplative Practice to the App Store: Designing a Digital Container for Mindfulness

Hundreds of popular mobile apps today market their ties to mindfulness. ...

Unpacking Privacy Labels: A Measurement and Developer Perspective on Google's Data Safety Section

Google has mandated developers to use Data Safety Sections (DSS) to incr...

CRYLOGGER: Detecting Crypto Misuses Dynamically

Cryptographic (crypto) algorithms are the essential ingredients of all s...

Feature Location Benchmark for Decomposing and Reusing Android Apps

Software reuse enables developers to reuse architecture, programs and ot...

Please sign up or login with your details

Forgot password? Click here to reset