{"id":"https://openalex.org/W4391248610","doi":"https://doi.org/10.1109/tdsc.2024.3358979","title":"Improving Logic Bomb Identification in Android Apps via Context-Aware Anomaly Detection","display_name":"Improving Logic Bomb Identification in Android Apps via Context-Aware Anomaly Detection","publication_year":2024,"publication_date":"2024-01-26","ids":{"openalex":"https://openalex.org/W4391248610","doi":"https://doi.org/10.1109/tdsc.2024.3358979"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3358979","doi":"https://doi.org/10.1109/tdsc.2024.3358979","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3358979","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10415257.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10415257.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040342077","display_name":"Marco Alecci","orcid":"https://orcid.org/0000-0002-5963-4599","observed_orcids":["https://orcid.org/0000-0002-5963-4599"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Marco Alecci","raw_affiliation_strings":["SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0002-5963-4599","affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090389831","display_name":"Jordan Samhi","orcid":"https://orcid.org/0000-0001-6052-6184","observed_orcids":["https://orcid.org/0000-0001-6052-6184"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["DE","LU"],"is_corresponding":false,"raw_author_name":"Jordan Samhi","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbrücken, Germany","SnT, University of Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0001-6052-6184","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbrücken, Germany","institution_ids":["https://openalex.org/I4210128801"]},{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106407830","display_name":"Li Li","orcid":"https://orcid.org/0000-0003-2990-1614","observed_orcids":["https://orcid.org/0000-0003-2990-1614"]},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["AU","CN"],"is_corresponding":false,"raw_author_name":"Li Li","raw_affiliation_strings":["School of Software, Beihang University, Beijing, China","Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2990-1614","affiliations":[{"raw_affiliation_string":"School of Software, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082835974","display_name":"Tegawend\u00e9 Fran\u00e7ois Bissyand\u00e9","orcid":"https://orcid.org/0000-0001-7270-9869","observed_orcids":["https://orcid.org/0000-0001-7270-9869"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Tegawend\u00e9 F. Bissyand\u00e9","raw_affiliation_strings":["SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0001-7270-9869","affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040326968","display_name":"Jacques Klein","orcid":"https://orcid.org/0000-0003-4052-475X","observed_orcids":["https://orcid.org/0000-0003-4052-475X"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Jacques Klein","raw_affiliation_strings":["SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0003-4052-475X","affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2495,"currency":"USD","value_usd":2495},"apc_paid":{"value":2495,"currency":"USD","value_usd":2495},"fwci":4.9452,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.95373803,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"21","issue":"5","first_page":"4735","last_page":"4753"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/logic-bombs","display_name":"logic bombs","score":0.9610000252723694},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6669999957084656},{"id":"https://openalex.org/keywords/one-class-svm","display_name":"one-class support vector machine","score":0.640999972820282},{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.5770000219345093}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8311535120010376},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7773692011833191},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4904586970806122},{"id":"https://openalex.org/C113839178","wikidata":"https://www.wikidata.org/wiki/Q7631418","display_name":"Subjective logic","level":3,"score":0.46100351214408875},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4585970938205719},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4433692991733551},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4235188066959381},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4038979411125183},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.403378427028656},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40274763107299805},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.11442205309867859},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08878493309020996},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/tdsc.2024.3358979","doi":"https://doi.org/10.1109/tdsc.2024.3358979","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3358979","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10415257.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/60053","doi":null,"is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/60053","pdf_url":"https://orbilu.uni.lu/bitstream/10993/60053/1/Improving_Logic_Bomb_Identification_in_Android_Apps_via_Context-Aware_Anomaly_Detection.pdf","source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing (2024)","raw_type":"http://purl.org/coar/resource_type/c_6501"},{"id":"pmh:oai:figshare.com:article/25435237","doi":null,"is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Improving_Logic_Bomb_Identification_in_Android_Apps_via_Context-Aware_Anomaly_Detection/25435237","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"doi:10.60882/cispa.25435237","doi":"https://doi.org/10.60882/cispa.25435237","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.25435237","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.60882/cispa.25435237.v1","doi":"https://doi.org/10.60882/cispa.25435237.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.25435237.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2024.3358979","doi":"https://doi.org/10.1109/tdsc.2024.3358979","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3358979","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10415257.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G6326759832","display_name":null,"funder_award_id":"NCER22/IS/16570468/NCER-FT","funder_id":"https://openalex.org/F4320321038","funder_display_name":"Fonds National de la Recherche Luxembourg"}],"funders":[{"id":"https://openalex.org/F4320321038","display_name":"Fonds National de la Recherche Luxembourg","ror":"https://ror.org/039z13y21"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391248610.pdf","grobid_xml":"https://content.openalex.org/works/W4391248610.grobid-xml"},"referenced_works_count":84,"referenced_works":["https://openalex.org/W124941384","https://openalex.org/W191656338","https://openalex.org/W1440076848","https://openalex.org/W1499141839","https://openalex.org/W1515180657","https://openalex.org/W1525731446","https://openalex.org/W1532142362","https://openalex.org/W1536098516","https://openalex.org/W1659144702","https://openalex.org/W1873332500","https://openalex.org/W1880262756","https://openalex.org/W1990649188","https://openalex.org/W2002478203","https://openalex.org/W2027538101","https://openalex.org/W2030179888","https://openalex.org/W2032112873","https://openalex.org/W2047764386","https://openalex.org/W2060692877","https://openalex.org/W2068583268","https://openalex.org/W2068590918","https://openalex.org/W2070386561","https://openalex.org/W2077278164","https://openalex.org/W2080696000","https://openalex.org/W2096196901","https://openalex.org/W2104052971","https://openalex.org/W2115175195","https://openalex.org/W2120297918","https://openalex.org/W2120952569","https://openalex.org/W2122646361","https://openalex.org/W2125011234","https://openalex.org/W2127218421","https://openalex.org/W2127723417","https://openalex.org/W2132870739","https://openalex.org/W2137185783","https://openalex.org/W2140095007","https://openalex.org/W2149298154","https://openalex.org/W2158874007","https://openalex.org/W2168649891","https://openalex.org/W2176830056","https://openalex.org/W2177710037","https://openalex.org/W2186224748","https://openalex.org/W2286924183","https://openalex.org/W2334842536","https://openalex.org/W2343325785","https://openalex.org/W2407313496","https://openalex.org/W2470899015","https://openalex.org/W2510008933","https://openalex.org/W2518060702","https://openalex.org/W2527812857","https://openalex.org/W2548283855","https://openalex.org/W2557385690","https://openalex.org/W2559490865","https://openalex.org/W2563758005","https://openalex.org/W2568897335","https://openalex.org/W2572070369","https://openalex.org/W2583329118","https://openalex.org/W2599823825","https://openalex.org/W2602930571","https://openalex.org/W2608489681","https://openalex.org/W2613948935","https://openalex.org/W2733829216","https://openalex.org/W2745115838","https://openalex.org/W2745604838","https://openalex.org/W2782017115","https://openalex.org/W2793024489","https://openalex.org/W2799080961","https://openalex.org/W2888794899","https://openalex.org/W2899191093","https://openalex.org/W2962909855","https://openalex.org/W2963213304","https://openalex.org/W2972976146","https://openalex.org/W2997474689","https://openalex.org/W2997591727","https://openalex.org/W3004623877","https://openalex.org/W3008212203","https://openalex.org/W3117167720","https://openalex.org/W3198735020","https://openalex.org/W4239799938","https://openalex.org/W4244726870","https://openalex.org/W4245027182","https://openalex.org/W4284664658","https://openalex.org/W4284673343","https://openalex.org/W4394769664","https://openalex.org/W6738637270"],"related_works":["https://openalex.org/W4226144068","https://openalex.org/W4284664658","https://openalex.org/W2518060702","https://openalex.org/W4225769098","https://openalex.org/W7161041180","https://openalex.org/W4313070021","https://openalex.org/W3198735020","https://openalex.org/W3194420550","https://openalex.org/W4383900653","https://openalex.org/W4383105977"],"abstract_inverted_index":{"One":[0],"prominent":[1],"tactic":[2],"used":[3],"to":[4,44,76,108,129,166,190,197],"keep":[5],"malicious":[6,19],"behavior":[7,134],"from":[8,188],"being":[9],"detected":[10],"during":[11],"dynamic":[12],"test":[13],"campaigns":[14],"is":[15],"logic":[16,30,56,86,183],"bombs,":[17],"where":[18],"operations":[20],"are":[21,27,195],"triggered":[22],"only":[23],"when":[24],"specific":[25],"conditions":[26],"satisfied.":[28],"Defusing":[29],"bombs":[31,184],"remains":[32],"an":[33,94,99],"unsolved":[34],"problem":[35],"in":[36,170],"the":[37,138,142,162,172,178,198],"literature.":[38],"In":[39],"this":[40],"work,":[41],"we":[42,61,80,115,145,156],"propose":[43],"investigate":[45],"Suspicious":[46],"Hidden":[47],"Sensitive":[48],"Operations":[49],"(SHSOs)":[50],"as":[51,82],"a":[52,63,149,167],"step":[53],"toward":[54],"triaging":[55,182],"bombs.":[57,87],"To":[58,111,136],"that":[59,67,161],"end,":[60],"develop":[62],"novel":[64],"hybrid":[65],"approach":[66,151],"combines":[68],"static":[69],"analysis":[70,164],"and":[71,97,174],"context-aware":[72,143,163],"anomaly":[73],"detection":[74],"techniques":[75],"uncover":[77],"SHSOs,":[78],"which":[79],"predict":[81],"likely":[83],"implementations":[84],"of":[85,126,141,180],"Concretely,":[88],"DIFUZER++":[89,147],"identifies":[90],"SHSO":[91],"entry-points":[92],"using":[93],"instrumentation":[95],"engine":[96],"conducting":[98],"inter-procedural":[100],"data-flow":[101],"analysis.":[102],"Subsequently,":[103],"it":[104],"extracts":[105],"trigger-specific":[106],"features":[107],"characterize":[109],"SHSOs.":[110],"detect":[112],"abnormal":[113],"triggers,":[114],"utilize":[116],"multiple":[117],"One-Class":[118],"SVM":[119],"models,":[120],"each":[121],"trained":[122],"on":[123],"distinct":[124],"sets":[125],"similar":[127],"apps":[128],"more":[130],"effectively":[131],"capture":[132],"normal":[133],"patterns.":[135],"assess":[137],"added":[139],"value":[140],"analysis,":[144],"compare":[146],"against":[148],"baseline":[150],"with":[152],"no":[153],"context":[154],"(that":[155],"name":[157],"DIFUZER).":[158],"We":[159],"show":[160],"leads":[165],"significant":[168],"improvement":[169],"both":[171],"precision":[173],"F1":[175],"score.":[176],"Furthermore,":[177],"probability":[179],"successfully":[181],"among":[185],"HSOs":[186],"increases":[187],"29.7%":[189],"58.8%.":[191],"All":[192],"our":[193],"artifacts":[194],"released":[196],"community.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-01-27T00:00:00"}