{"id":"https://openalex.org/W7129456382","doi":"https://doi.org/10.1109/icaice68195.2025.11382515","title":"A Lightweight Android Malware Classification Framework for Imbalanced Data","display_name":"A Lightweight Android Malware Classification Framework for Imbalanced Data","publication_year":2025,"publication_date":"2025-11-07","ids":{"openalex":"https://openalex.org/W7129456382","doi":"https://doi.org/10.1109/icaice68195.2025.11382515"},"language":"en","primary_location":{"id":"doi:10.1109/icaice68195.2025.11382515","doi":"https://doi.org/10.1109/icaice68195.2025.11382515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaice68195.2025.11382515","pdf_url":null,"source":{"id":"https://openalex.org/S4363608137","display_name":"International Conference on Artificial Intelligence and Computer Engineering (ICAICE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 6th International Conference on Artificial Intelligence and Computer Engineering (ICAICE)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107957102","display_name":"Jian Wang","orcid":"https://orcid.org/0000-0003-4537-0147","observed_orcids":["https://orcid.org/0000-0003-4537-0147"]},"institutions":[{"id":"https://openalex.org/I4403386539","display_name":"Software Engineering Institute of Guangzhou","ror":"https://ror.org/0549ke970","country_code":"CN","type":"education","lineage":["https://openalex.org/I4403386539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Wang","raw_affiliation_strings":["Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China","institution_ids":["https://openalex.org/I4403386539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103905665","display_name":"Hong Jian Wu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4403386539","display_name":"Software Engineering Institute of Guangzhou","ror":"https://ror.org/0549ke970","country_code":"CN","type":"education","lineage":["https://openalex.org/I4403386539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hong Jian Wu","raw_affiliation_strings":["Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China","institution_ids":["https://openalex.org/I4403386539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074238179","display_name":"Ya Yin Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4403386539","display_name":"Software Engineering Institute of Guangzhou","ror":"https://ror.org/0549ke970","country_code":"CN","type":"education","lineage":["https://openalex.org/I4403386539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ya Yin Lin","raw_affiliation_strings":["Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China","institution_ids":["https://openalex.org/I4403386539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060198927","display_name":"Yi Yu","orcid":"https://orcid.org/0000-0003-4326-5992","observed_orcids":["https://orcid.org/0000-0003-4326-5992"]},"institutions":[{"id":"https://openalex.org/I4403386539","display_name":"Software Engineering Institute of Guangzhou","ror":"https://ror.org/0549ke970","country_code":"CN","type":"education","lineage":["https://openalex.org/I4403386539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Yu","raw_affiliation_strings":["Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software Engineering Institute of Guangzhou,Faculty of Cyberspace Security,Guangzhou,China","institution_ids":["https://openalex.org/I4403386539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4403386539"],"apc_list":null,"apc_paid":null,"fwci":0.497,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54492083,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"786","last_page":"789"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android-malware-classification","display_name":"Android malware classification","score":0.9240000247955322},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.7770000100135803},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.7910000085830688},{"id":"https://openalex.org/keywords/random-oversampling","display_name":"random oversampling","score":0.9570000171661377},{"id":"https://openalex.org/keywords/lightgbm","display_name":"LightGBM","score":1.0},{"id":"https://openalex.org/keywords/l1-and-l2-regularization","display_name":"L1 and L2 regularization","score":0.9369999766349792},{"id":"https://openalex.org/keywords/banking-malware","display_name":"banking malware","score":0.8679999709129333},{"id":"https://openalex.org/keywords/lightweight-machine-learning","display_name":"lightweight machine learning","score":0.5299999713897705},{"id":"https://openalex.org/keywords/frequency-based-features","display_name":"frequency-based features","score":0.6399999856948853}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7767999768257141},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.73089998960495},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.6193000078201294},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5787000060081482},{"id":"https://openalex.org/C138602881","wikidata":"https://www.wikidata.org/wiki/Q2709591","display_name":"Confusion matrix","level":2,"score":0.5090000033378601},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.49239999055862427},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.47839999198913574},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.477400004863739},{"id":"https://openalex.org/C2781140086","wikidata":"https://www.wikidata.org/wiki/Q557945","display_name":"Confusion","level":2,"score":0.4514000117778778},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4406000077724457},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.43209999799728394},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36550000309944153},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.320499986410141},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.30489999055862427},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.29109999537467957},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.28459998965263367},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C2776004034","wikidata":"https://www.wikidata.org/wiki/Q1068755","display_name":"Check-in","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icaice68195.2025.11382515","doi":"https://doi.org/10.1109/icaice68195.2025.11382515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaice68195.2025.11382515","pdf_url":null,"source":{"id":"https://openalex.org/S4363608137","display_name":"International Conference on Artificial Intelligence and Computer Engineering (ICAICE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 6th International Conference on Artificial Intelligence and Computer Engineering (ICAICE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W3105429705","https://openalex.org/W4289313429","https://openalex.org/W4367595786","https://openalex.org/W4389612953","https://openalex.org/W4389719707","https://openalex.org/W4392356648","https://openalex.org/W4396773505","https://openalex.org/W4402818229","https://openalex.org/W4405648001","https://openalex.org/W4407828042","https://openalex.org/W4408747300"],"related_works":["https://openalex.org/W4220884761","https://openalex.org/W4293066046","https://openalex.org/W4407828042","https://openalex.org/W6911818192","https://openalex.org/W4200043090","https://openalex.org/W7160408504","https://openalex.org/W7223111802","https://openalex.org/W4361200066","https://openalex.org/W4410639444","https://openalex.org/W4409659723"],"abstract_inverted_index":{"The":[0,96],"rapid":[1],"proliferation":[2],"of":[3,111],"Android":[4,129],"malware":[5,88,130],"poses":[6],"a":[7,29,38,118],"serious":[8],"threat":[9],"to":[10,32,45,94],"the":[11,50,55,61,109],"platform\u2019s":[12],"ecosystem.":[13],"Machine-learning\u2013based":[14],"classification":[15],"is":[16],"an":[17],"effective":[18],"defense,":[19],"yet":[20],"real-world":[21],"datasets":[22],"are":[23],"typically":[24],"imbalanced,":[25],"which":[26],"severely":[27],"degrades":[28],"model\u2019s":[30],"ability":[31],"recognize":[33],"minority":[34],"classes.":[35],"We":[36],"propose":[37],"method":[39],"combining":[40],"random":[41],"oversampling":[42],"with":[43,67,74,86],"LightGBM":[44,66],"address":[46],"this":[47],"challenge.":[48],"At":[49],"data":[51],"level,":[52,63],"we":[53,64],"balance":[54],"training":[56],"set":[57],"via":[58],"oversampling;":[59],"at":[60],"model":[62],"employ":[65],"L1/L2":[68],"regularization":[69],"for":[70],"robust":[71],"optimization.":[72],"Evaluated":[73],"comprehensive":[75],"metrics,":[76],"our":[77],"approach":[78,120],"achieves":[79],"99.23%":[80],"accuracy":[81],"and":[82],"98.6%":[83],"macro-F1":[84],"score,":[85],"Banking":[87],"recall":[89],"improving":[90],"by":[91],"14.1%":[92],"due":[93],"oversampling.":[95],"confusion":[97],"matrix":[98],"reveals":[99],"that":[100,117],"most":[101],"errors":[102],"occur":[103],"between":[104],"behaviorally":[105],"similar":[106],"classes,":[107],"indicating":[108],"limitations":[110],"frequency-based":[112],"features.":[113],"Our":[114],"work":[115],"demonstrates":[116],"lightweight":[119],"can":[121],"effectively":[122],"handle":[123],"class":[124],"imbalance":[125],"while":[126],"providing":[127],"practical":[128],"detection.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-02-18T00:00:00"}