Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
skip to main content
10.1145/3308558.3313611acmotherconferencesArticle/Chapter ViewAbstractPublication PageswebconfConference Proceedingsconference-collections
research-article

Understanding the Evolution of Mobile App Ecosystems: A Longitudinal Measurement Study of Google Play

Published: 13 May 2019 Publication History
  • Get Citation Alerts
  • Abstract

    The continuing expansion of mobile app ecosystems has attracted lots of efforts from the research community. However, although a large number of research studies have focused on analyzing the corpus of mobile apps and app markets, little is known at a comprehensive level on the evolution of mobile app ecosystems. Because the mobile app ecosystem is continuously evolving over time, understanding the dynamics of app ecosystems could provide unique insights that cannot be achieved through studying a single static snapshot. In this paper, we seek to shed light on the dynamics of mobile app ecosystems. Based on 5.3 million app records (with both app metadata and apks) collected from three snapshots of Google Play over more than three years, we conduct the first study on the evolution of app ecosystems from different aspects. Our results suggest that although the overall ecosystem shows promising progress in regard of app popularity, user ratings, permission usage and privacy policy declaration, there still exists a considerable number of unsolved issues including malicious apps, update issues, third-party tracking threats, improper app promotion behaviors, and spamming/malicious developers. Our study shows that understanding the evolution of mobile app ecosystems can help developers make better decision on developing and releasing apps, provide insights for app markets to identifying misbehaviors, and help mobile users to choose desired apps.

    References

    [1]
    2017. Google To Delete Android Apps over Privacy Policy. https://www.techrepublic.com/article/google-will-soon-delete-apps-with-no-privacy-policies-from-play-store/.
    [2]
    2017. Request App Permissions. https://developer.android.com/training/permissions/requesting.
    [3]
    2018. Google Play is hosting a disturbing amount of cryptocurrency malware. https://thenextweb.com/hardfork/2018/04/20/google-play-cryptocurrency-apps-malware/.
    [4]
    2018. How Malware Keeps Sneaking Past Google Play's Defenses. https://www.wired.com/story/google-play-store-malware/.
    [5]
    2018. New Android Trojan malware discovered in Google Play. https://blog.malwarebytes.com/cybercrime/2017/11/new-trojan-malware-discovered-google-play/.
    [6]
    2018. PrivacyGrade: Grading The Privacy Of Smartphone Apps. privacygrade.org/.
    [7]
    Mohamed Ali, Mona Erfani Joorabchi, and Ali Mesbah. 2017. Same app, different app stores: A comparative study. In Proceedings of the 4th International Conference on Mobile Software Engineering and Systems. 79-90.
    [8]
    Android. 2018. Permissions overview. https://developer.android.com/guide/topics/permissions/overview#permission-groups.
    [9]
    AppBrain. 2018. Android Ad Network statistics and market share. https://www.appbrain.com/stats/libraries/ad-networks.
    [10]
    Daniel Arp, Michael Spreitzenbarth, Malte Hubner, Hugo Gascon, Konrad Rieck, and CERT Siemens. 2014. DREBIN: Effective and Explainable Detection of Android Malware in Your Pocket. In The Network and Distributed System Security Symposium (NDSS '14). 23-26.
    [11]
    Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, and Patrick McDaniel. 2014. Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. Acm Sigplan Notices 49, 6 (2014), 259-269.
    [12]
    Michael Backes, Sven Bugiel, and Erik Derr. 2016. Reliable third-party library detection in android and its security applications. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. ACM, 356-367.
    [13]
    Paolo Calciati and Alessandra Gorla. 2017. How do apps evolve in their permission requests?: a preliminary study. In Proceedings of the 14th International Conference on Mining Software Repositories. 37-41.
    [14]
    Bogdan Carbunar and Rahul Potharaju. 2015. A longitudinal study of the Google app market. In Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining 2015. ACM, 242-249.
    [15]
    Kai Chen, Peng Liu, and Yingjun Zhang. 2014. Achieving accuracy and scalability simultaneously in detecting application clones on android markets. In Proceedings of the 36th International Conference on Software Engineering. 175-186.
    [16]
    Ning Chen, Jialiu Lin, Steven CH Hoi, Xiaokui Xiao, and Boshen Zhang. 2014. AR-miner: mining informative reviews for developers from mobile app marketplace. In Proceedings of the 36th International Conference on Software Engineering. ACM, 767-778.
    [17]
    Jonathan Crussell, Ryan Stevens, and Hao Chen. 2014. Madfraud: Investigating ad fraud in android applications. In Proceedings of the 12th annual international conference on Mobile systems, applications, and services. 123-134.
    [18]
    Christian de Looper. 2018. From Android 1.0 to Android 9.0, here's how Google's OS evolved over a decade. https://www.digitaltrends.com/mobile/android-version-history/.
    [19]
    Christian de Looper. 2018. Google's AI has cut down Google Play's malware by more than half. https://www.digitaltrends.com/mobile/google-play-malware-artificial-intelligence/.
    [20]
    Feng Dong, Haoyu Wang, Li Li, Yao Guo, Tegawende´ F Bissyande´, Tianming Liu, Guoai Xu, and Jacques Klein. {n. d.}. Frauddroid: Automated ad fraud detection for android apps. In Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 257-268.
    [21]
    Jon Fingas. 2018. Android malware returned to Google Play with just a name change. https://www.engadget.com/2018/05/14/android-malware-returned-to-google-play-with-just-a-name-change/.
    [22]
    Bin Fu, Jialiu Lin, Lei Li, Christos Faloutsos, Jason Hong, and Norman Sadeh. 2013. Why people hate your app: Making sense of user feedback in a mobile app store. In Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining. 1276-1284.
    [23]
    Jun Gao, Li Li, Pingfan Kong, Tegawende´ F Bissyande´, and Jacques Klein. 2018. Poster: On Vulnerability Evolution in Android Apps. In 2018 IEEE/ACM 40th International Conference on Software Engineering: Companion (ICSE-Companion). 276-277.
    [24]
    GooglePlay. 2018. Store Listing and Promotion. https://play.google.com/intl/en-US/about/storelisting-promotional/metadata/index.html.
    [25]
    Michael Grace, Yajin Zhou, Qiang Zhang, Shihong Zou, and Xuxian Jiang. 2012. Riskranker: scalable and accurate zero-day android malware detection. In Proceedings of the 10th international conference on Mobile systems, applications, and services. ACM, 281-294.
    [26]
    Michael C Grace, Wu Zhou, Xuxian Jiang, and Ahmad-Reza Sadeghi. 2012. Unsafe exposure analysis of mobile in-app advertisements. In Proceedings of the fifth ACM conference on Security and Privacy in Wireless and Mobile Networks. 101-112.
    [27]
    JERRY HILDENBRAND. 2018. 10 years of Android: How the best mobile OS was made. https://www.androidcentral.com/10-years-android-how-best-mobile-os-was-made.
    [28]
    Yangyu Hu, Haoyu Wang, Li Li, Yao Guo, Guoai Xu, and Ren He. 2019. Want to Earn a Few Extra Bucks? A First Look at Money-making Apps. In IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER 2019).
    [29]
    Yangyu Hu, Haoyu Wang, Yajin Zhou, Yao Guo, Li Li, Bingxuan Luo, and Fangren Xu. 2018. Dating with scambots: Understanding the ecosystem of fraudulent dating applications. arXiv preprint arXiv:1807.04901(2018).
    [30]
    Muhammad Ikram, Narseo Vallina-Rodriguez, Suranga Seneviratne, Mohamed Ali Kaafar, and Vern Paxson. 2016. An analysis of the privacy and security risks of android vpn permission-enabled apps. In Proceedings of the 2016 Internet Measurement Conference. ACM, 349-364.
    [31]
    Yuta Ishii, Takuya Watanabe, Fumihiro Kanei, Yuta Takata, Eitaro Shioji, Mitsuaki Akiyama, Takeshi Yagi, Bo Sun, and Tatsuya Mori. 2017. Understanding the security management of global third-party Android marketplaces. In Proceedings of the 2nd ACM SIGSOFT International Workshop on App Market Analytics. 12-18.
    [32]
    Mona Erfani Joorabchi, Ali Mesbah, and Philippe Kruchten. 2013. Real challenges in mobile app development. In The ACM/IEEE International Symposium on Empirical Software Engineering and Measurement. 15-24.
    [33]
    Hammad Khalid, Emad Shihab, Meiyappan Nagappan, and Ahmed E Hassan. 2015. What do mobile app users complain about?IEEE Software 32, 3 (2015), 70-77.
    [34]
    Chengze Li, Haoyu Wang, Junfeng Wang, Qi Li, Jianbo Yu, Jingyi Guo, Guoai Xu, and Yanhui Guo. 2017. CRSPR: PageRank for Android apps. IEEE Access 5(2017), 18004-18015.
    [35]
    Li Li, Alexandre Bartel, Tegawende´ F Bissyande´, Jacques Klein, and Yves Le Traon. 2015. Apkcombiner: Combining multiple android apps to support inter-app analysis. In IFIP International Information Security Conference. Springer, 513-527.
    [36]
    Li Li, Tegawende´ F Bissyande´, Jacques Klein, and Yves Le Traon. 2016. An investigation into the use of common libraries in android apps. In The 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER). 403-414.
    [37]
    Li Li, Tegawende´ F Bissyande´, Haoyu Wang, and Jacques Klein. 2018. Cid: Automating the detection of api-related compatibility issues in android apps. In Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis. ACM, 153-163.
    [38]
    Li Li, Jun Gao, Me´de´ric Hurier, Pingfan Kong, Tegawende´ F Bissyande´, Alexandre Bartel, Jacques Klein, and Yves Le Traon. 2017. AndroZoo++: Collecting Millions of Android Apps and Their Metadata for the Research Community. arXiv preprint arXiv:1709.05281(2017).
    [39]
    Yuanchun Li, Yao Guo, and Xiangqun Chen. 2016. Peruim: Understanding mobile application privacy with permission-ui mapping. In Proceedings of the 2016 ACM International Joint Conference on Pervasive and Ubiquitous Computing. 682-693.
    [40]
    Soo Ling Lim and Peter J Bentley. 2012. How to be a successful app developer: Lessons from the simulation of an app ecosystem. ACM SIGEVOlution 6, 1 (2012), 2-15.
    [41]
    Jialiu Lin, Shahriyar Amini, Jason I Hong, Norman Sadeh, Janne Lindqvist, and Joy Zhang. 2012. Expectation and purpose: understanding users' mental models of mobile app privacy through crowdsourcing. In Proceedings of the 2012 ACM Conference on Ubiquitous Computing. ACM, 501-510.
    [42]
    Minxing Liu, Haoyu Wang, Yao Guo, and Jason Hong. 2016. Identifying and analyzing the privacy of apps for kids. In Proceedings of the 17th International Workshop on Mobile Computing Systems and Applications. 105-110.
    [43]
    Ziang Ma, Haoyu Wang, Yao Guo, and Xiangqun Chen. 2016. LibRadar: fast and accurate detection of third-party libraries in Android apps. In Proceedings of the 38th International Conference on Software Engineering Companion. 653-656.
    [44]
    Ziang Ma, Haoyu Wang, Yao Guo, and Xiangqun Chen. 2016. LibRadar: fast and accurate detection of third-party libraries in Android apps. In Proceedings of the 38th international conference on software engineering companion. ACM, 653-656.
    [45]
    Sarah Perez. 2017. App economy to grow to $6.3 trillion in 2021, user base to nearly double to 6.3 billion. https://techcrunch.com/tag/app-ecosystem/.
    [46]
    Thanasis Petsas, Antonis Papadogiannakis, Michalis Polychronakis, Evangelos P Markatos, and Thomas Karagiannis. 2017. Measurement, modeling, and analysis of the mobile app ecosystem. ACM Transactions on Modeling and Performance Evaluation of Computing Systems (TOMPECS) 2, 2 (2017), 7.
    [47]
    Google Play. 2018. Privacy, Security, and Deception. https://play.google.com/about/privacy-security-deception/.
    [48]
    Ben Popper. 2017. Google announces over 2 billion monthly active devices on Android. https://www.theverge.com/2017/5/17/15654454/android-reaches-2-billion-monthly-active-users.
    [49]
    Rahul Potharaju, Mizanur Rahman, and Bogdan Carbunar. 2017. A Longitudinal Study of Google Play. IEEE Transactions on computational social systems 4, 3 (2017), 135-149.
    [50]
    Israel J Mojica Ruiz, Meiyappan Nagappan, Bram Adams, Thorsten Berger, Steffen Dienst, and Ahmed E Hassan. 2016. Examining the rating system used in mobile-app stores. IEEE Software 33, 6 (2016), 86-92.
    [51]
    Marcos Sebastián, Richard Rivera, Platon Kotzias, and Juan Caballero. 2016. Avclass: A tool for massive malware labeling. In International Symposium on Research in Attacks, Intrusions, and Defenses. 230-253.
    [52]
    TrendLabs Security. 2018. A Look at Google Bouncer. https://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-google-bouncer/.
    [53]
    Suranga Seneviratne, Harini Kolamunna, and Aruna Seneviratne. 2015. A measurement study of tracking in paid mobile applications. In Proceedings of the 8th ACM Conference on Security & Privacy in Wireless and Mobile Networks. ACM, 7.
    [54]
    Suranga Seneviratne, Aruna Seneviratne, Mohamed Ali Kaafar, Anirban Mahanti, and Prasant Mohapatra. 2015. Early detection of spam mobile apps. In Proceedings of the 24th International Conference on World Wide Web (WWW '15). 949-959.
    [55]
    Statista. 2018. Android - Statistics & Facts. https://www.statista.com/topics/876/android/.
    [56]
    Vincent F Taylor and Ivan Martinovic. 2017. A longitudinal study of financial apps in the Google Play Store. In 2017 International Conference on Financial Cryptography and Data Security.
    [57]
    Vincent F Taylor and Ivan Martinovic. 2017. To update or not to update: Insights from a two-year study of android app evolution. In Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security. ACM, 45-57.
    [58]
    Yuan Tian, Meiyappan Nagappan, David Lo, and Ahmed E Hassan. 2015. What are the characteristics of high-rated apps? a case study on free android applications. In Software Maintenance and Evolution (ICSME), 2015 IEEE International Conference on. 301-310.
    [59]
    Alok Tongaonkar, Shuaifu Dai, Antonio Nucci, and Dawn Song. 2013. Understanding mobile app usage patterns using in-app advertisements. In International Conference on Passive and Active Network Measurement. 63-72.
    [60]
    Nicolas Viennot, Edward Garcia, and Jason Nieh. 2014. A measurement study of google play. In ACM SIGMETRICS Performance Evaluation Review, Vol. 42. ACM, 221-233.
    [61]
    Jaikumar Vijayan. 2018. Google Removes 145 Malware-Laden Apps From Play Store. http://www.eweek.com/mobile/google-removes-145-malware-laden-apps-from-play-store.
    [62]
    Haoyu Wang and Yao Guo. 2017. Understanding third-party libraries in mobile app analysis. In Software Engineering Companion (ICSE-C). 515-516.
    [63]
    Haoyu Wang, Yao Guo, Ziang Ma, and Xiangqun Chen. 2015. WuKong: a scalable and accurate two-phase approach to Android app clone detection. In Proceedings of the 2015 International Symposium on Software Testing and Analysis. 71-82.
    [64]
    Haoyu Wang, Yao Guo, Ziang Ma, and Xiangqun Chen. 2017. Automated Detection and Classification of Third-Party Libraries in Large Scale Android Apps. Journal of Software 28, 6 (2017), 1373-1388.
    [65]
    Haoyu Wang, Yao Guo, Zihao Tang, Guangdong Bai, and Xiangqun Chen. 2015. Reevaluating android permission gaps with static and dynamic analysis. In 2015 IEEE Global Communications Conference (GLOBECOM). 1-6.
    [66]
    Haoyu Wang, Jason Hong, and Yao Guo. 2015. Using text mining to infer the purpose of permission use in mobile apps. In Proceedings of the 2015 ACM International Joint Conference on Pervasive and Ubiquitous Computing. 1107-1118.
    [67]
    Haoyu Wang, Hao Li, Li Li, Yao Guo, and Guoai Xu. 2018. Why are Android apps removed from Google Play?: a large-scale empirical study. In Proceedings of the 15th International Conference on Mining Software Repositories. ACM, 231-242.
    [68]
    Haoyu Wang, Yuanchun Li, Yao Guo, Yuvraj Agarwal, and Jason I Hong. 2017. Understanding the purpose of permission use in mobile apps. ACM Transactions on Information Systems (TOIS) 35, 4 (2017), 43.
    [69]
    Haoyu Wang, Zhe Liu, Yao Guo, Xiangqun Chen, Miao Zhang, Guoai Xu, and Jason Hong. 2017. An explorative study of the mobile app ecosystem from app developers' perspective. In Proceedings of the 26th International Conference on World Wide Web. 163-172.
    [70]
    Haoyu Wang, Zhe Liu, Jingyue Liang, Narseo Vallina-Rodriguez, Yao Guo, Li Li, Juan Tapiador, Jingcun Cao, and Guoai Xu. 2018. Beyond Google Play: A Large-Scale Comparative Study of Chinese Android App Markets. In The Internet Measurement Conference (IMC '18).
    [71]
    Fengguo Wei, Yuping Li, Sankardas Roy, Xinming Ou, and Wu Zhou. 2017. Deep ground truth analysis of current android malware. In International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. 252-276.
    [72]
    Wikipedia. 2018. Google Play - Wikipedia. https://en.wikipedia.org/wiki/Google_Play.
    [73]
    Le Yu, Xiapu Luo, Xule Liu, and Tao Zhang. 2016. Can we trust the privacy policies of android apps?. In The 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN '16). 538-549.
    [74]
    Hengshu Zhu, Hui Xiong, Yong Ge, and Enhong Chen. 2015. Discovery of ranking fraud for mobile apps. IEEE Transactions on knowledge and data engineering 27, 1(2015), 74-87.

    Cited By

    View all
    • (2024)Global Prosperity or Local Monopoly? Understanding the Geography of App PopularityProceedings of the 21st International Conference on Mining Software Repositories10.1145/3643991.3644935(322-334)Online publication date: 15-Apr-2024
    • (2024)Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform AnalysesProceedings of the 21st International Conference on Mining Software Repositories10.1145/3643991.3644896(348-360)Online publication date: 15-Apr-2024
    • (2024)Mobile Foundation Model as FirmwareProceedings of the 30th Annual International Conference on Mobile Computing and Networking10.1145/3636534.3649361(279-295)Online publication date: 29-May-2024
    • Show More Cited By

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Other conferences
    WWW '19: The World Wide Web Conference
    May 2019
    3620 pages
    ISBN:9781450366748
    DOI:10.1145/3308558
    Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

    In-Cooperation

    • IW3C2: International World Wide Web Conference Committee

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 13 May 2019

    Permissions

    Request permissions for this article.

    Check for updates

    Author Tags

    1. Android
    2. App ecosystem
    3. Google Play
    4. evolution

    Qualifiers

    • Research-article
    • Research
    • Refereed limited

    Conference

    WWW '19
    WWW '19: The Web Conference
    May 13 - 17, 2019
    CA, San Francisco, USA

    Acceptance Rates

    Overall Acceptance Rate 1,899 of 8,196 submissions, 23%

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • Downloads (Last 12 months)102
    • Downloads (Last 6 weeks)4
    Reflects downloads up to

    Other Metrics

    Citations

    Cited By

    View all
    • (2024)Global Prosperity or Local Monopoly? Understanding the Geography of App PopularityProceedings of the 21st International Conference on Mining Software Repositories10.1145/3643991.3644935(322-334)Online publication date: 15-Apr-2024
    • (2024)Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform AnalysesProceedings of the 21st International Conference on Mining Software Repositories10.1145/3643991.3644896(348-360)Online publication date: 15-Apr-2024
    • (2024)Mobile Foundation Model as FirmwareProceedings of the 30th Annual International Conference on Mobile Computing and Networking10.1145/3636534.3649361(279-295)Online publication date: 29-May-2024
    • (2024)A Comprehensive Deep Learning Library Benchmark and Optimal Library SelectionIEEE Transactions on Mobile Computing10.1109/TMC.2023.3301973(1-14)Online publication date: 2024
    • (2024)Accurate and Efficient Code Matching Across Android Application Versions Against Obfuscation2024 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)10.1109/SANER60148.2024.00028(204-215)Online publication date: 12-Mar-2024
    • (2024)GPTCN: Gated Parallel Transformer Convolutional Networks for Downstream-Task User Representation Learning on App UsageICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)10.1109/ICASSP48485.2024.10446256(5175-5179)Online publication date: 14-Apr-2024
    • (2023)Studying Users’ Perceptions of COVID-19 Mobile Applications in Saudi ArabiaSustainability10.3390/su1502095615:2(956)Online publication date: 4-Jan-2023
    • (2023)Adoption of Recurrent Innovations: A Large-Scale Case Study on Mobile App UpdatesACM Transactions on the Web10.1145/362618918:1(1-26)Online publication date: 14-Nov-2023
    • (2023)A Deep Dive into the Featured iOS AppsProceedings of the 14th Asia-Pacific Symposium on Internetware10.1145/3609437.3609467(112-122)Online publication date: 4-Aug-2023
    • (2023)Mixed Signals: Analyzing Software Attribution Challenges in the Android EcosystemIEEE Transactions on Software Engineering10.1109/TSE.2023.323658249:4(2964-2979)Online publication date: 1-Apr-2023
    • Show More Cited By

    View Options

    Get Access

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    HTML Format

    View this article in HTML Format.

    HTML Format

    Media

    Figures

    Other

    Tables

    Share

    Share

    Share this Publication link

    Share on social media