{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:35:44Z","timestamp":1791459344206,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3696630.3728532","type":"proceedings-article","created":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:08:09Z","timestamp":1753729689000},"page":"64-74","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["LLM App Squatting and Cloning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-6153-0638","authenticated-orcid":false,"given":"Yinglin","family":"Xie","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-9965-2109","authenticated-orcid":false,"given":"Xinyi","family":"Hou","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8793-5367","authenticated-orcid":false,"given":"Yanjie","family":"Zhao","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6030-0481","authenticated-orcid":false,"given":"Kai","family":"Chen","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1100-8633","authenticated-orcid":false,"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,7,28]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2018. DNSTwist: domain name permutation engine. https:\/\/github.com\/elceef\/dnstwist\/."},{"key":"e_1_3_2_1_2_1","unstructured":"2018. URLCrazy.. https:\/\/www.morningstarsecurity.com\/research\/urlcrazy."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Pieter Agten Wouter Joosen Frank Piessens and Nick Nikiforakis. 2015. Seven Months' Worth of Mistakes: A Longitudinal Study of Typosquatting Abuse.. In NDSS.","DOI":"10.14722\/ndss.2015.23058"},{"key":"e_1_3_2_1_4_1","unstructured":"aitoolreport.com. 2024. Prompt-Engineer. https:\/\/gptsapp.io\/gpts\/prompt-engineer-pro-ai\/1ql83vbvr."},{"key":"e_1_3_2_1_5_1","volume-title":"GPT in Sheep's Clothing: The Risk of Customized GPTs. arXiv preprint arXiv:2401.09075","author":"Antebi Sagiv","year":"2024","unstructured":"Sagiv Antebi, Noam Azulay, Edan Habler, Ben Ganon, Asaf Shabtai, and Yuval Elovici. 2024. GPT in Sheep's Clothing: The Risk of Customized GPTs. arXiv preprint arXiv:2401.09075 (2024)."},{"key":"e_1_3_2_1_6_1","unstructured":"Character.Ai. 2024. Character.Ai. https:\/\/character.ai\/."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","first-page":"942","DOI":"10.1007\/s11390-015-1573-7","article-title":"Detecting android malware using clone detection","volume":"30","author":"Chen Jian","year":"2015","unstructured":"Jian Chen, Manar H Alalfi, Thomas R Dean, and Ying Zou. 2015. Detecting android malware using clone detection. Journal of Computer Science and Technology 30 (2015), 942\u2013956.","journal-title":"Journal of Computer Science and Technology"},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 36th International Conference on Software Engineering. 175\u2013186","author":"Chen Kai","year":"2014","unstructured":"Kai Chen, Peng Liu, and Yingjun Zhang. 2014. Achieving accuracy and scalability simultaneously in detecting application clones on android markets. In Proceedings of the 36th International Conference on Software Engineering. 175\u2013186."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2956035"},{"key":"e_1_3_2_1_10_1","volume-title":"2017 International conference on networking, architecture, and storage (NAS). IEEE, 1\u201310","author":"Cheng Zhenyu","year":"2017","unstructured":"Zhenyu Cheng, Xunxun Chen, Yongzheng Zhang, Shuhao Li, and Yafei Sang. 2017. Detecting information theft based on mobile network flows for android users. In 2017 International conference on networking, architecture, and storage (NAS). IEEE, 1\u201310."},{"key":"e_1_3_2_1_11_1","unstructured":"Cici. 2024. Cici. https:\/\/www.ciciai.com\/chat\/."},{"key":"e_1_3_2_1_12_1","unstructured":"Claude. 2024. Claude. https:\/\/claude.ai\/login."},{"key":"e_1_3_2_1_13_1","unstructured":"OpenAI Community. 2024. Custom GPTs or the new Pirate Bay? https:\/\/community.openai.com\/t\/custom-gpts-or-the-new-pirate-bay\/551027\/5."},{"key":"e_1_3_2_1_14_1","unstructured":"OpenAI Community. 2024. OpenAI Community. https:\/\/community.openai.com."},{"key":"e_1_3_2_1_15_1","unstructured":"OpenAI Community. 2024. Someone stealing my GPT listed. https:\/\/community.openai.com\/t\/someone-stealing-my-gpt-listed\/524411\/4."},{"key":"e_1_3_2_1_16_1","unstructured":"Coze. 2024. Coze. https:\/\/www.coze.com\/."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings 17","author":"Crussell Jonathan","year":"2012","unstructured":"Jonathan Crussell, Clint Gibler, and Hao Chen. 2012. Attack of the clones: Detecting cloned applications on android markets. In Computer Security-ESORICS 2012: 17th European Symposium on Research in Computer Security, Pisa, Italy, September 10\u201312, 2012. Proceedings 17. Springer, 37\u201354."},{"key":"e_1_3_2_1_18_1","unstructured":"FlowGPT. 2024. FlowGPT. https:\/\/flowgpt.com\/."},{"key":"e_1_3_2_1_19_1","unstructured":"Gemini. 2024. Gemini. https:\/\/gemini.google.com\/."},{"key":"e_1_3_2_1_20_1","unstructured":"gptsapp.io. 2024. GPTs APP. https:\/\/gptsapp.io\/."},{"key":"e_1_3_2_1_21_1","volume-title":"Detecting Cybersquatting-Based Business Email Compromise. Ph. D. Dissertation","author":"Griffiths Daniel James","unstructured":"Daniel James Griffiths. 2022. Detecting Cybersquatting-Based Business Email Compromise. Ph. D. Dissertation. University of Southampton."},{"key":"e_1_3_2_1_22_1","volume-title":"On the (In) Security of LLM App Stores. arXiv preprint arXiv:2407.08422","author":"Hou Xinyi","year":"2024","unstructured":"Xinyi Hou, Yanjie Zhao, and Haoyu Wang. 2024. On the (In) Security of LLM App Stores. arXiv preprint arXiv:2407.08422 (2024)."},{"key":"e_1_3_2_1_23_1","volume-title":"GPTZoo: A Large-scale Dataset of GPTs for the Research Community. arXiv preprint arXiv:2405.15630","author":"Hou Xinyi","year":"2024","unstructured":"Xinyi Hou, Yanjie Zhao, Shenao Wang, and Haoyu Wang. 2024. GPTZoo: A Large-scale Dataset of GPTs for the Research Community. arXiv preprint arXiv:2405.15630 (2024). https:\/\/arxiv.org\/abs\/2405.15630v1"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the Web Conference 2020. International World Wide Web Conferences Steering Committee, 1234\u20131245","author":"Hu Yangyu","year":"2020","unstructured":"Yangyu Hu, Haoyu Wang, Ren He, Li Li, Gareth Tyson, Ignacio Castro, Yao Guo, Lei Wu, and Guoai Xu. 2020. Mobile App Squatting. In Proceedings of the Web Conference 2020. International World Wide Web Conferences Steering Committee, 1234\u20131245."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","first-page":"77142","DOI":"10.1109\/ACCESS.2020.2988400","article-title":"Robust app clone detection based on similarity of ui structure","volume":"8","author":"Hu Yangyu","year":"2020","unstructured":"Yangyu Hu, Guosheng Xu, Bowen Zhang, Kun Lai, Guoai Xu, and Miao Zhang. 2020. Robust app clone detection based on similarity of ui structure. IEEE Access 8 (2020), 77142\u201377155.","journal-title":"IEEE Access"},{"key":"e_1_3_2_1_26_1","volume-title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications. arXiv preprint arXiv:2405.06823","author":"Hui Bo","year":"2024","unstructured":"Bo Hui, Haolin Yuan, Neil Gong, Philippe Burlina, and Yinzhi Cao. 2024. PLeak: Prompt Leaking Attacks against Large Language Model Applications. arXiv preprint arXiv:2405.06823 (2024)."},{"key":"e_1_3_2_1_27_1","unstructured":"IKEA. 2024. IKEA. https:\/\/chatgpt.com\/g\/g-4DZ3fQDVL-ikea."},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 2016 ACM on International Workshop on Security And Privacy Analytics. 25\u201332","author":"Ishii Yuta","year":"2016","unstructured":"Yuta Ishii, Takuya Watanabe, Mitsuaki Akiyama, and Tatsuya Mori. 2016. Clone or Relative? Understanding the Origins of Similar Android Apps. In Proceedings of the 2016 ACM on International Workshop on Security And Privacy Analytics. 25\u201332."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","first-page":"1703","DOI":"10.1587\/transinf.2016ICP0012","article-title":"Appraiser: A large scale analysis of android clone apps","volume":"100","author":"Ishii Yuta","year":"2017","unstructured":"Yuta Ishii, Takuya Watanabe, Mitsuaki Akiyama, and Tatsuya Mori. 2017. Appraiser: A large scale analysis of android clone apps. IEICE TRANSACTIONS on Information and Systems 100, 8 (2017), 1703\u20131713.","journal-title":"IEICE TRANSACTIONS on Information and Systems"},{"key":"e_1_3_2_1_30_1","unstructured":"Evin Jaff Yuhao Wu Ning Zhang and Umar Iqbal. 2024. Data Exposure from LLM Apps: An In-depth Investigation of OpenAI's GPTs. arXiv:2408.13247 [cs.CR] https:\/\/arxiv.org\/abs\/2408.13247"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","first-page":"163","DOI":"10.1007\/s10664-024-10441-z","article-title":"Evaluating few-shot and contrastive learning methods for code clone detection","volume":"29","author":"Khajezade Mohamad","year":"2024","unstructured":"Mohamad Khajezade, Fatemeh H Fard, and Mohamed S Shehata. 2024. Evaluating few-shot and contrastive learning methods for code clone detection. Empirical Software Engineering 29, 6 (2024), 163.","journal-title":"Empirical Software Engineering"},{"key":"e_1_3_2_1_32_1","volume-title":"BERT: A Review of Applications in Natural Language Processing and Understanding. arXiv:2103.11943 [cs.CL] https:\/\/arxiv.org\/abs\/2103.11943","author":"Koroteev M. V.","year":"2021","unstructured":"M. V. Koroteev. 2021. BERT: A Review of Applications in Natural Language Processing and Understanding. arXiv:2103.11943 [cs.CL] https:\/\/arxiv.org\/abs\/2103.11943"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security. 97\u2013108","author":"Levesque Fanny Lalonde","year":"2013","unstructured":"Fanny Lalonde Levesque, Jude Nsiempba, Jos\u00e9 M Fernandez, Sonia Chiasson, and Anil Somayaji. 2013. A clinical study of risk factors related to malware infections. In Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security. 97\u2013108."},{"key":"e_1_3_2_1_34_1","volume-title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services. In 33rd USENIX Security Symposium (USENIX Security 24)","author":"Lin Zilong","year":"2024","unstructured":"Zilong Lin, Jian Cui, Xiaojing Liao, and XiaoFeng Wang. 2024. Malla: Demystifying Real-world Large Language Model Integrated Malicious Services. In 33rd USENIX Security Symposium (USENIX Security 24)."},{"key":"e_1_3_2_1_35_1","volume-title":"Suidroid: An efficient hardening-resilient approach to android app clone detection. In 2016","author":"Lyu Fang","year":"2016","unstructured":"Fang Lyu, Yapin Lin, Junfeng Yang, and Junhai Zhou. 2016. Suidroid: An efficient hardening-resilient approach to android app clone detection. In 2016 IEEE Trustcom\/BigDataSE\/ISPA. IEEE, 511\u2013518."},{"key":"e_1_3_2_1_36_1","volume-title":"2016 3rd International Conference on Systems and Informatics (ICSAI). IEEE, 520\u2013525","author":"Niu Haofei","year":"2016","unstructured":"Haofei Niu, Tianchang Yang, and Shaozhang Niu. 2016. Clone analysis and detection in android applications. In 2016 3rd International Conference on Systems and Informatics (ICSAI). IEEE, 520\u2013525."},{"key":"e_1_3_2_1_37_1","volume-title":"2016 3rd International Conference on Systems and Informatics (ICSAI). 520\u2013525","author":"Niu Haofei","year":"2016","unstructured":"Haofei Niu, Tianchang Yang, and Shaozhang Niu. 2016. Clone analysis and detection in android applications. In 2016 3rd International Conference on Systems and Informatics (ICSAI). 520\u2013525. 10.1109\/ICSAI.2016.7811010"},{"key":"e_1_3_2_1_38_1","unstructured":"OpenAI. 2024. ChatGPT. https:\/\/openai.com\/chatgpt\/."},{"key":"e_1_3_2_1_39_1","unstructured":"OpenAI. 2024. GPT Store. https:\/\/chat.openai.com\/gpts."},{"key":"e_1_3_2_1_40_1","unstructured":"OpenAI. 2024. OpenAI Developer Forum. https:\/\/community.openai.com."},{"key":"e_1_3_2_1_41_1","unstructured":"Poe. 2023. Poe. https:\/\/poe.com\/."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","first-page":"735","DOI":"10.1016\/j.telpol.2014.11.003","article-title":"The impact of piracy on prominent and non-prominent software developers","volume":"39","author":"Rasch Alexander","year":"2015","unstructured":"Alexander Rasch and Tobias Wenzel. 2015. The impact of piracy on prominent and non-prominent software developers. Telecommunications Policy 39, 8 (2015), 735\u2013744.","journal-title":"Telecommunications Policy"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","first-page":"1165","DOI":"10.1016\/j.infsof.2013.01.008","article-title":"Software clone detection: A systematic review","volume":"55","author":"Rattan Dhavleesh","year":"2013","unstructured":"Dhavleesh Rattan, Rajesh Bhatia, and Maninder Singh. 2013. Software clone detection: A systematic review. Information and Software Technology 55, 7 (2013), 1165\u20131199.","journal-title":"Information and Software Technology"},{"key":"e_1_3_2_1_44_1","unstructured":"Noam Shazeer and De Freitas Daniel. 2024. Character.AI. https:\/\/character.ai\/."},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the fifth ACM\/IEEE Workshop on Hot Topics in Web Systems and Technologies. 1\u20138.","author":"Spaulding Jeffrey","year":"2017","unstructured":"Jeffrey Spaulding, DaeHun Nyang, and Aziz Mohaisen. 2017. Understanding the effectiveness of typosquatting techniques. In Proceedings of the fifth ACM\/IEEE Workshop on Hot Topics in Web Systems and Technologies. 1\u20138."},{"key":"e_1_3_2_1_46_1","volume-title":"GPT Store Mining and Analysis. arXiv preprint arXiv:2405.10210","author":"Su Dongxun","year":"2024","unstructured":"Dongxun Su, Yanjie Zhao, Xinyi Hou, Shenao Wang, and Haoyu Wang. 2024. GPT Store Mining and Analysis. arXiv preprint arXiv:2405.10210 (2024)."},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the 2017 internet measurement conference. 419\u2013431","author":"Szurdi Janos","year":"2017","unstructured":"Janos Szurdi and Nicolas Christin. 2017. Email typosquatting. In Proceedings of the 2017 internet measurement conference. 419\u2013431."},{"key":"e_1_3_2_1_48_1","volume-title":"Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs. arXiv preprint arXiv:2401.00905","author":"Tao Guanhong","year":"2023","unstructured":"Guanhong Tao, Siyuan Cheng, Zhuo Zhang, Junmin Zhu, Guangyu Shen, and Xiangyu Zhang. 2023. Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs. arXiv preprint arXiv:2401.00905 (2023)."},{"key":"e_1_3_2_1_49_1","volume-title":"Defending Against Typosquatting Attacks In Programming Language-Based Package Repositories. Master's thesis","author":"Taylor Matthew","unstructured":"Matthew Taylor. 2020. Defending Against Typosquatting Attacks In Programming Language-Based Package Repositories. Master's thesis. University of Kansas."},{"key":"e_1_3_2_1_50_1","volume-title":"Lorenzo De Carli, and Vaibhav Rastogi","author":"Taylor Matthew","year":"2020","unstructured":"Matthew Taylor, Ruturaj K Vaidya, Drew Davidson, Lorenzo De Carli, and Vaibhav Rastogi. 2020. Spellbound: Defending against package typosquatting. arXiv preprint arXiv:2003.03471 (2020)."},{"key":"e_1_3_2_1_51_1","volume-title":"Typosquatting and combosquatting attacks on the python ecosystem. In 2020 ieee european symposium on security and privacy workshops (euros&pw)","author":"Vu Duc-Ly","unstructured":"Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, and Antonino Sabetta. 2020. Typosquatting and combosquatting attacks on the python ecosystem. In 2020 ieee european symposium on security and privacy workshops (euros&pw). IEEE, 509\u2013514."},{"key":"e_1_3_2_1_52_1","volume-title":"Proceedings of the 2015 international symposium on software testing and analysis. 71\u201382","author":"Wang Haoyu","year":"2015","unstructured":"Haoyu Wang, Yao Guo, Ziang Ma, and Xiangqun Chen. 2015. Wukong: A scalable and accurate two-phase approach to android app clone detection. In Proceedings of the 2015 international symposium on software testing and analysis. 71\u201382."},{"key":"e_1_3_2_1_53_1","unstructured":"Wikipedia. 2024. Cybersquatting. https:\/\/en.wikipedia.org\/wiki\/Cybersquatting."},{"key":"e_1_3_2_1_54_1","volume-title":"Liuhuo Wan, Tian Yang Ooi, and Guangdong Bai.","author":"Yan Chuan","year":"2024","unstructured":"Chuan Yan, Ruomai Ren, Mark Huasong Meng, Liuhuo Wan, Tian Yang Ooi, and Guangdong Bai. 2024. Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security. arXiv preprint arXiv:2408.14357 (2024)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2007.1078"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","first-page":"3052","DOI":"10.1109\/TSE.2023.3240118","article-title":"Challenging machine learning-based clone detectors via semantic-preserving code transformations","volume":"49","author":"Zhang Weiwei","year":"2023","unstructured":"Weiwei Zhang, Shengjian Guo, Hongyu Zhang, Yulei Sui, Yinxing Xue, and Yun Xu. 2023. Challenging machine learning-based clone detectors via semantic-preserving code transformations. IEEE Transactions on Software Engineering 49, 5 (2023), 3052\u20133070.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_3_2_1_57_1","volume-title":"A First Look at GPT Apps: Landscape and Vulnerability. arXiv preprint arXiv:2402.15105","author":"Zhang Zejun","year":"2024","unstructured":"Zejun Zhang, Li Zhang, Xin Yuan, Anlan Zhang, Mengwei Xu, and Feng Qian. 2024. A First Look at GPT Apps: Landscape and Vulnerability. arXiv preprint arXiv:2402.15105 (2024)."},{"key":"e_1_3_2_1_58_1","volume-title":"LLM App Store Analysis: A Vision and Roadmap. arXiv preprint arXiv:2404.12737","author":"Zhao Yanjie","year":"2024","unstructured":"Yanjie Zhao, Xinyi Hou, Shenao Wang, and Haoyu Wang. 2024. LLM App Store Analysis: A Vision and Roadmap. arXiv preprint arXiv:2404.12737 (2024)."}],"event":{"name":"FSE Companion '25: 33rd ACM International Conference on the Foundations of Software Engineering","location":"Clarion Hotel Trondheim Trondheim Norway","acronym":"FSE Companion '25","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696630.3728532","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:13:38Z","timestamp":1753730018000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696630.3728532"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":58,"alternative-id":["10.1145\/3696630.3728532","10.1145\/3696630"],"URL":"https:\/\/doi.org\/10.1145\/3696630.3728532","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-07-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}