Results of the summarizing process for the arXiv paper: 2010.10088v1

, , , , The study "How Did That Get In My Phone? Unwanted App Distribution on Android Devices" by Platon Kotzias, Juan Caballero, and Leyla Bilge delves into the prevalence and distribution of unwanted apps on Android devices. With billions of active devices, Android's popularity and open nature make it a prime target for malware and potentially unwanted programs (PUP). The research uncovers lesser-known distribution channels such as Web downloads, pay-per-install (PPI) services, backup restoration, bloatware, and IM tools. Using reputation logs from a major security vendor encompassing 7.9 million apps across 12 million devices between June and September 2019, the study reveals that between 10% to 24% of user devices encounter at least one unwanted app. The analysis distinguishes between malware and PUP instances, shedding light on their prevalence within the Android ecosystem. The research highlights the Play market as the primary app distribution channel responsible for 87% of all installs and 67% of unwanted app installations. Despite its dominance, the Play market boasts robust defenses against unwanted apps. Conversely, alternative markets distribute a smaller share of all apps but account for over 10% of unwanted apps. Bloatware emerges as a significant vector for distributing unwanted apps with 6% of total installs falling into this category. Moreover, backup restoration is identified as an unintentional distribution channel allowing unwanted apps to persist even after users replace their phones. The study estimates that PPI-driven unwanted app distribution on Android is lower compared to Windows platforms. Additionally, while web downloads are infrequent, they present a riskier proposition compared to alternative markets. Overall,this comprehensive investigation provides valuable insights into the diverse vectors through which unwanted apps infiltrate Android devices. By quantifying and comparing distributions across various channels, the study contributes to enhancing understanding and fortifying defenses against malicious software on one of the world's most widely used operating systems.

• - The study explores the prevalence and distribution of unwanted apps on Android devices.
• - Lesser-known distribution channels for unwanted apps include Web downloads, pay-per-install services, backup restoration, bloatware, and IM tools.
• - Between 10% to 24% of user devices encounter at least one unwanted app.
• - The Play market is the primary app distribution channel responsible for 87% of all installs and 67% of unwanted app installations.
• - Bloatware accounts for 6% of total installs and is a significant vector for distributing unwanted apps.
• - Backup restoration unintentionally allows unwanted apps to persist even after users replace their phones.
• - PPI-driven unwanted app distribution on Android is lower compared to Windows platforms.
• - Web downloads are infrequent but present a riskier proposition compared to alternative markets.

Summary- The study looks at how many unwanted apps are on Android devices and where they come from. - Some ways unwanted apps get onto devices are through Web downloads, pay-per-install services, backup restoration, bloatware, and IM tools. - Between 10% to 24% of devices have at least one unwanted app on them. - Most unwanted apps come from the Play market, with bloatware being a common way they spread. - Backup restoration can keep unwanted apps even when users switch phones. Definitions- Unwanted: Not wanted or desired; something you don't like or need. - Distribution: The way things are shared or given out to people. - Prevalence: How often something happens or appears in a certain situation. - Installations: The act of putting software onto a device so it can be used.

Introduction

The widespread use of Android devices has made them a prime target for malware and potentially unwanted programs (PUP). In order to better understand the prevalence and distribution of these unwanted apps, Platon Kotzias, Juan Caballero, and Leyla Bilge conducted a comprehensive study titled "How Did That Get In My Phone? Unwanted App Distribution on Android Devices". This research paper delves into lesser-known distribution channels such as Web downloads, pay-per-install (PPI) services, backup restoration, bloatware, and IM tools. By analyzing reputation logs from a major security vendor encompassing 7.9 million apps across 12 million devices between June and September 2019, the study sheds light on the various ways in which unwanted apps infiltrate Android devices.

The Prevalence of Unwanted Apps on Android Devices

The research reveals that between 10% to 24% of user devices encounter at least one unwanted app. This is a significant number considering the billions of active Android devices worldwide. The analysis distinguishes between malware and PUP instances, with PUPs being more prevalent compared to traditional malware. This highlights the need for further understanding and defenses against these types of unwanted software.

Distribution Channels for Unwanted Apps

The study identifies several distribution channels through which unwanted apps make their way onto Android devices:

1. Play Market

The Play market is responsible for distributing the majority of all apps (87%) but only accounts for 67% of unwanted app installations. This shows that while it remains the primary source for app downloads on Android devices, it boasts robust defenses against unwanted apps.

2. Alternative Markets

Alternative markets may distribute a smaller share of all apps but account for over 10% of unwanted app installs. These markets may have less stringent security measures in place, making them a potential target for unwanted app distribution.

3. Bloatware

Bloatware, or pre-installed apps on devices, is identified as a significant vector for distributing unwanted apps. This is because these apps often come with the device and are not subject to the same security checks as those on official app stores.

4. Backup Restoration

Backup restoration is an unintentional distribution channel that allows unwanted apps to persist even after users replace their phones. This means that if a user backs up their device with an unwanted app installed, it will be restored onto their new device.

5. Web Downloads

While web downloads are infrequent compared to other channels, they present a riskier proposition for users as they may download apps from untrusted sources.

Comparison with Other Platforms

The study also compares PPI-driven unwanted app distribution on Android with Windows platforms and finds that it is lower on Android devices. This could be due to stricter security measures in place on the Play market compared to other platforms.

Conclusion

In conclusion, "How Did That Get In My Phone? Unwanted App Distribution on Android Devices" provides valuable insights into the diverse vectors through which unwanted apps infiltrate Android devices. By quantifying and comparing distributions across various channels, this research contributes to enhancing understanding and fortifying defenses against malicious software on one of the world's most widely used operating systems. It highlights the need for continued efforts towards securing alternative markets and preventing bloatware installations in order to reduce the prevalence of unwanted apps on Android devices.