@article{oai:ipsj.ixsq.nii.ac.jp:00220193, author = {Shuichi, Ichioka and Estelle, Pouget and Takao, Mimura and Jun, Nakajima and Toshihiro, Yamauchi and Shuichi, Ichioka and Estelle, Pouget and Takao, Mimura and Jun, Nakajima and Toshihiro, Yamauchi}, issue = {9}, journal = {情報処理学会論文誌}, month = {Sep}, note = {As the use of mobile devices for financial payments continues to increase, prevention of attacks by Android malware becomes critical. In this study, we collected apps shared on Twitter in 2018 to create a Twitter shared apps dataset. We also clarified the proportion of apps that contained malware and those utilizing accessibility services (ASs). Furthermore, we faced issues in determining whether an app is suspicious or benign using VirusTotal results and extracting permissions from apps. Using VirusTotal, we studied the distribution of the number of apps for each anti-virus engine that “detected” malware and analyzed the changes in results over time to determine thresholds. Additionally, we examined methods for extracting permissions using Apktool and the aapt command, installed apps that were judged to request ASs and examined whether they were requested to obtain more accurate results. We analyzed the usage rate of ASs and the requested permissions. Furthermore, we analyzed the target Android application program interface levels of suspicious apps that use ASs. ------------------------------ This is a preprint of an article intended for publication Journal of Information Processing(JIP). This preprint should not be cited. This article should be cited as: Journal of Information Processing Vol.30(2022) (online) DOI http://dx.doi.org/10.2197/ipsjjip.30.601 ------------------------------, As the use of mobile devices for financial payments continues to increase, prevention of attacks by Android malware becomes critical. In this study, we collected apps shared on Twitter in 2018 to create a Twitter shared apps dataset. We also clarified the proportion of apps that contained malware and those utilizing accessibility services (ASs). Furthermore, we faced issues in determining whether an app is suspicious or benign using VirusTotal results and extracting permissions from apps. Using VirusTotal, we studied the distribution of the number of apps for each anti-virus engine that “detected” malware and analyzed the changes in results over time to determine thresholds. Additionally, we examined methods for extracting permissions using Apktool and the aapt command, installed apps that were judged to request ASs and examined whether they were requested to obtain more accurate results. We analyzed the usage rate of ASs and the requested permissions. Furthermore, we analyzed the target Android application program interface levels of suspicious apps that use ASs. ------------------------------ This is a preprint of an article intended for publication Journal of Information Processing(JIP). This preprint should not be cited. This article should be cited as: Journal of Information Processing Vol.30(2022) (online) DOI http://dx.doi.org/10.2197/ipsjjip.30.601 ------------------------------}, title = {Analysis of Android Applications Shared on Twitter Focusing on Accessibility Services}, volume = {63}, year = {2022} }