June 6, 2018 Journal article Open Access

Richard Rivera; Platon Kotzias; Avinash Sudhodanan; Juan Caballero

Citation Style Language JSON Export

{
  "DOI": "10.1049/iet-ifs.2017.0585", 
  "language": "eng", 
  "author": [
    {
      "family": "Richard Rivera"
    }, 
    {
      "family": "Platon Kotzias"
    }, 
    {
      "family": "Avinash Sudhodanan"
    }, 
    {
      "family": "Juan Caballero"
    }
  ], 
  "issued": {
    "date-parts": [
      [
        2018, 
        6, 
        6
      ]
    ]
  }, 
  "abstract": "<p>Freeware is proprietary software that can be used free of charge. A popular vector for distributing freeware are download<br>\nportals, i.e., websites that index, categorize, and host programs. Download portals can be abused to distribute potentially unwanted<br>\nprograms (PUP) and malware. The abuse can be due to PUP and malware authors uploading their ware, by benign freeware<br>\nauthors joining as affiliate publishers of PPI services and other affiliate programs, or by malicious download portal owners. In this<br>\nwork, we perform a systematic study of abuse in download portals. We build a platform to crawl download portals and apply it to<br>\ndownload 191K Windows freeware installers from 20 download portals. We analyze the collected installers and execute them in a<br>\nsandbox to monitor their installation. We measure an overall ratio of PUP and malware between 8% (conservative estimate) and<br>\n26% (lax estimate). In 18 of the 20 download portals examined the amount of PUP and malware is below 9%. But, we also find<br>\ntwo download portals exclusively used to distribute PPI downloaders. Finally, we detail different abusive behaviors that authors of<br>\nundesirable programs use to distribute their programs through download portals.</p>", 
  "title": "Costly Freeware: A Systematic Analysis of Abuse in Download Portals", 
  "type": "article-journal", 
  "id": "1295566"
}