{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,11]],"date-time":"2025-11-11T13:39:12Z","timestamp":1762868352809,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006541","name":"Comunidad de Madrid","doi-asserted-by":"publisher","award":["P2018\/TCS-4339"],"award-info":[{"award-number":["P2018\/TCS-4339"]}],"id":[{"id":"10.13039\/501100006541","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Ministerio de Ciencia, Innovaci\u00f3n y Universidades","award":["RTI2018-102043-B-I00,FPU18\/06416"],"award-info":[{"award-number":["RTI2018-102043-B-I00,FPU18\/06416"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417281","type":"proceedings-article","created":{"date-parts":[[2020,11,2]],"date-time":"2020-11-02T18:27:02Z","timestamp":1604341622000},"page":"771-785","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["Towards Attribution in Mobile Markets"],"prefix":"10.1145","author":[{"given":"Silvia","family":"Sebastian","sequence":"first","affiliation":[{"name":"IMDEA Software Institute & Universidad Polit\u00e9cnica de Madrid, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juan","family":"Caballero","sequence":"additional","affiliation":[{"name":"IMDEA Software Institute, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903508"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.03.012"},{"key":"e_1_3_2_2_3_1","unstructured":"Apple. 2020. App Store Review Guidelines . https:\/\/developer.apple.com\/app-store\/review\/guidelines\/.  Apple. 2020. App Store Review Guidelines . https:\/\/developer.apple.com\/app-store\/review\/guidelines\/."},{"key":"e_1_3_2_2_4_1","unstructured":"BankMyCell. 2020. Number of Mobile Phone & Smartphone Users . https:\/\/www.bankmycell.com\/blog\/how-many-phones-are-in-the-world.  BankMyCell. 2020. Number of Mobile Phone & Smartphone Users . https:\/\/www.bankmycell.com\/blog\/how-many-phones-are-in-the-world."},{"key":"e_1_3_2_2_5_1","unstructured":"App Brain. 2020. Android and Google Play statistics. https:\/\/www.appbrain.com\/stats.  App Brain. 2020. Android and Google Play statistics. https:\/\/www.appbrain.com\/stats."},{"volume-title":"International Conference on Software Engineering .","year":"2014","author":"Chen Kai","key":"e_1_3_2_2_6_1"},{"volume-title":"USENIX Security Symposium .","year":"2015","author":"Chen Kai","key":"e_1_3_2_2_7_1"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1921233.1921247"},{"key":"e_1_3_2_2_9_1","first-page":"323","article-title":"Untangling attribution","volume":"2","author":"Clark David D","year":"2011","journal-title":"Harvard National Security Journal"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-10772-6_3"},{"key":"e_1_3_2_2_11_1","unstructured":"Telef\u00f3nica ElevenPaths. 2016. Demographic Analysis of Google Play. https:\/\/www.elevenpaths.com\/wp-content\/uploads\/2016\/03\/2016-03-07_Demographic_Analysis_of_Google_Play_EN.pdf.  Telef\u00f3nica ElevenPaths. 2016. Demographic Analysis of Google Play. https:\/\/www.elevenpaths.com\/wp-content\/uploads\/2016\/03\/2016-03-07_Demographic_Analysis_of_Google_Play_EN.pdf."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176322"},{"volume-title":"International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment .","year":"2012","author":"Hanna Steve","key":"e_1_3_2_2_13_1"},{"volume-title":"Role and challenges for sufficient cyber-attack attribution","author":"Hunker Jeffrey","key":"e_1_3_2_2_14_1"},{"key":"e_1_3_2_2_15_1","unstructured":"IDC. 2020. Smartphone Market Share . https:\/\/www.idc.com\/promo\/smartphone-market-share\/os.  IDC. 2020. Smartphone Market Share . https:\/\/www.idc.com\/promo\/smartphone-market-share\/os."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292577"},{"volume-title":"Network analysis: Methodological Foundations","author":"Kammer Frank","key":"e_1_3_2_2_17_1"},{"volume-title":"Untangling attribution: Moving to accountability in cyberspace. Prepared Statement. Hearing on Planning for the Future of Cyber Attack","year":"2010","author":"Knake Robert K","key":"e_1_3_2_2_18_1"},{"key":"e_1_3_2_2_19_1","unstructured":"Aleksejs Kuprins. 2019. Analysis of Joker ? A Spy & Premium Subscription Bot on GooglePlay . https:\/\/medium.com\/csis-techblog\/analysis-of-joker-a-spy-premium-subscription-bot-on-googleplay-9ad24f044451.  Aleksejs Kuprins. 2019. Analysis of Joker ? A Spy & Premium Subscription Bot on GooglePlay . https:\/\/medium.com\/csis-techblog\/analysis-of-joker-a-spy-premium-subscription-bot-on-googleplay-9ad24f044451."},{"key":"e_1_3_2_2_20_1","unstructured":"SecureD Lab. 2019 a. com.forshared. https:\/\/lab.secure-d.io\/com-forshared\/.  SecureD Lab. 2019 a. com.forshared. https:\/\/lab.secure-d.io\/com-forshared\/."},{"key":"e_1_3_2_2_21_1","unstructured":"SecureD Lab. 2019 b. com.snaptube.premium. https:\/\/lab.secure-d.io\/com-snaptube-premium\/.  SecureD Lab. 2019 b. com.snaptube.premium. https:\/\/lab.secure-d.io\/com-snaptube-premium\/."},{"key":"e_1_3_2_2_22_1","unstructured":"Liarna Laporta. 2019. Trojan malware infecting 17 apps on the App Store . https:\/\/www.wandera.com\/ios-trojan-malware\/.  Liarna Laporta. 2019. Trojan malware infecting 17 apps on the App Store . https:\/\/www.wandera.com\/ios-trojan-malware\/."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_9"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_4"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"crossref","unstructured":"Ingrid Lunden. 2013. Facebook Buys Mobile Data Analytics Company Onavo Reportedly For Up To $200M... And (Finally?) Gets Its Office In Israel . https:\/\/techcrunch.com\/2013\/10\/13\/facebook-buys-mobile-analytics-company-onavo-and-finally-gets-its-office-in-israel\/.  Ingrid Lunden. 2013. Facebook Buys Mobile Data Analytics Company Onavo Reportedly For Up To $200M... And (Finally?) Gets Its Office In Israel . https:\/\/techcrunch.com\/2013\/10\/13\/facebook-buys-mobile-analytics-company-onavo-and-finally-gets-its-office-in-israel\/.","DOI":"10.1016\/S1359-6128(13)70402-6"},{"volume-title":"Ting Su, Annamalai Narayanan, and Yang Liu.","year":"2017","author":"Meng Guozhu","key":"e_1_3_2_2_26_1"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2983962"},{"key":"e_1_3_2_2_28_1","unstructured":"Mozilla. 2020. Public Suffix List. https:\/\/publicsuffix.org\/.  Mozilla. 2020. Public Suffix List. https:\/\/publicsuffix.org\/."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516749"},{"key":"e_1_3_2_2_30_1","first-page":"110","article-title":"Dissecting the android bouncer. SummerCon2012","volume":"95","author":"Oberheide Jon","year":"2012","journal-title":"New York"},{"volume-title":"Malware: Gotta catch 'em all! https:\/\/blog.aptoide.com\/evolution-of-aptoide-malware-detection-system\/.","year":"2016","author":"Pires Diogo","key":"e_1_3_2_2_31_1"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-98385-1_15"},{"volume-title":"Samaneh Tajalizadehkhoob, Maciej Korczy'nski, and Wouter Joosen.","year":"2019","author":"Pochat Victor Le","key":"e_1_3_2_2_33_1"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1080\/01402390.2014.977382"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23822-2_10"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/347059.347560"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1485"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383060"},{"volume-title":"IEEE Conference on Computer Communications .","year":"2001","author":"Song Dawn Xiaodong","key":"e_1_3_2_2_39_1"},{"key":"e_1_3_2_2_40_1","unstructured":"Sophos. 2019. HiddAd-T IOCs. https:\/\/github.com\/sophoslabs\/IoCs\/blob\/master\/Android-HiddAd-T.  Sophos. 2019. HiddAd-T IOCs. https:\/\/github.com\/sophoslabs\/IoCs\/blob\/master\/Android-HiddAd-T."},{"key":"e_1_3_2_2_41_1","unstructured":"Sophos. 2020. Sophos-originated indicators-of-compromise from published reports. https:\/\/github.com\/sophoslabs\/IoCs\/.  Sophos. 2020. Sophos-originated indicators-of-compromise from published reports. https:\/\/github.com\/sophoslabs\/IoCs\/."},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435378"},{"key":"e_1_3_2_2_43_1","unstructured":"Dr. Web. 2019. Clicker Trojan Installed from Google Play by Some 102 000 000 Android Users . https:\/\/news.drweb.com\/show\/?i=13382.  Dr. Web. 2019. Clicker Trojan Installed from Google Play by Some 102 000 000 Android Users . https:\/\/news.drweb.com\/show\/?i=13382."},{"key":"e_1_3_2_2_44_1","unstructured":"Dr. Web. 2020. Malware Indicators of Compromise. https:\/\/github.com\/DoctorWebLtd\/malware-iocs\/.  Dr. Web. 2020. Malware Indicators of Compromise. https:\/\/github.com\/DoctorWebLtd\/malware-iocs\/."},{"key":"e_1_3_2_2_46_1","unstructured":"Lorin Wu. 2020. Malicious Optimizer and Utility Android Apps on Google Play Communicate with Trojans that Install Malware Perform Mobile Ad Fraud . https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/malicious-apps-on-google-play-communicate-with-trojans-install-malware-perform-mobile-ad-fraud\/.  Lorin Wu. 2020. Malicious Optimizer and Utility Android Apps on Google Play Communicate with Trojans that Install Malware Perform Mobile Ad Fraud . https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/malicious-apps-on-google-play-communicate-with-trojans-install-malware-perform-mobile-ad-fraud\/."},{"key":"e_1_3_2_2_47_1","unstructured":"Ecular Xu. 2018. HiddAd-T IOCs. https:\/\/documents.trendmicro.com\/assets\/AdwareFoundonGooglePlay_Appendix.pdf.  Ecular Xu. 2018. HiddAd-T IOCs. https:\/\/documents.trendmicro.com\/assets\/AdwareFoundonGooglePlay_Appendix.pdf."},{"key":"e_1_3_2_2_48_1","unstructured":"Rowland Yu. 2018. Rogueware RebornA Business Analysis of a Growing Fraud in Android. https:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/factsheets\/sophos-rogueware-reborn-wpna.pdf.  Rowland Yu. 2018. Rogueware RebornA Business Analysis of a Growing Fraud in Android. https:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/factsheets\/sophos-rogueware-reborn-wpna.pdf."},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2133601.2133640"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.16"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Virtual Event USA","acronym":"CCS '20"},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417281","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417281","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:31Z","timestamp":1750197691000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417281"}},"subtitle":["Identifying Developer Account Polymorphism"],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":49,"alternative-id":["10.1145\/3372297.3417281","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417281","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}