🤖 AI Summary
This work addresses the unique security and copyright challenges posed by virtual reality (VR) applications, which existing code clone detection methods struggle to handle effectively. To bridge this gap, the authors propose VR-Themis, the first clone detection framework specifically designed for VR applications. VR-Themis employs a two-stage strategy: it first performs coarse-grained clustering based on statistical features, followed by fine-grained similarity analysis of suspicious samples using a custom-designed hierarchical-object-behavior (HOB) multidimensional feature model. This approach achieves a balance between accuracy and scalability, successfully identifying 307 cloned instances among 4,277 real-world VR applications without any false positives, thereby demonstrating its effectiveness and practical utility.
📝 Abstract
Repackaging of mobile applications (aka app cloning) not only threatens the security and privacy of mobile users but also infringes upon the copyright of the original app developers. However, existing detection methods that primarily focus on mobile platforms (such as Android) fail to capture the essential features of virtual reality (VR). Consequently, they are inadequate for effectively detecting cloned VR apps, which have often been targeted by illegal users in the VR market. Considering the unique features of VR apps, this paper proposes a two-stage app clone detection framework, namely VR-Themis, based on \emph{Hierarchy-Object-Behaviour} (HOB). Firstly, VR-Themis exploits the coarse-grained stage to cluster apps based on their retrievable statistical features, making this tool scalable to large-scale VR app datasets. Then, in the fine-grained stage, VR-Themis performs in-depth analysis of the suspicious apps (identified in the first stage) by calculating similarity using our defined \emph{HOB metrics}. Our extensive experiments indicate that VR-Themis successfully detects 307 suspected clone apps from the collected 4,277 VR apps without false positives, demonstrating its effectiveness and scalability.