{"id":"https://openalex.org/W4404287441","doi":"https://doi.org/10.1007/s10626-024-00406-1","title":"Automatic detection of Android crypto ransomware using supervisor reduction","display_name":"Automatic detection of Android crypto ransomware using supervisor reduction","publication_year":2024,"publication_date":"2024-11-12","ids":{"openalex":"https://openalex.org/W4404287441","doi":"https://doi.org/10.1007/s10626-024-00406-1"},"language":"en","primary_location":{"id":"doi:10.1007/s10626-024-00406-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10626-024-00406-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10626-024-00406-1.pdf","source":{"id":"https://openalex.org/S134484881","display_name":"Discrete Event Dynamic Systems","issn_l":"0924-6703","issn":["0924-6703","1573-7594"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discrete Event Dynamic Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10626-024-00406-1.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101933782","display_name":"Christopher Jun Wen Chew","orcid":"https://orcid.org/0000-0003-2149-2641"},"institutions":[{"id":"https://openalex.org/I52179390","display_name":"University of Waikato","ror":"https://ror.org/013fsnh78","country_code":"NZ","type":"education","lineage":["https://openalex.org/I52179390"]}],"countries":["NZ"],"is_corresponding":true,"raw_author_name":"Christopher Jun Wen Chew","raw_affiliation_strings":["University of Waikato, Hamilton, New Zealand"],"raw_orcid":"https://orcid.org/0000-0003-2149-2641","affiliations":[{"raw_affiliation_string":"University of Waikato, Hamilton, New Zealand","institution_ids":["https://openalex.org/I52179390"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009427975","display_name":"Robi Malik","orcid":"https://orcid.org/0000-0002-6118-8129"},"institutions":[{"id":"https://openalex.org/I52179390","display_name":"University of Waikato","ror":"https://ror.org/013fsnh78","country_code":"NZ","type":"education","lineage":["https://openalex.org/I52179390"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Robi Malik","raw_affiliation_strings":["University of Waikato, Hamilton, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waikato, Hamilton, New Zealand","institution_ids":["https://openalex.org/I52179390"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024729513","display_name":"Vimal Kumar","orcid":"https://orcid.org/0000-0002-4955-3058"},"institutions":[{"id":"https://openalex.org/I52179390","display_name":"University of Waikato","ror":"https://ror.org/013fsnh78","country_code":"NZ","type":"education","lineage":["https://openalex.org/I52179390"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Vimal Kumar","raw_affiliation_strings":["University of Waikato, Hamilton, New Zealand"],"raw_orcid":"https://orcid.org/0000-0002-4955-3058","affiliations":[{"raw_affiliation_string":"University of Waikato, Hamilton, New Zealand","institution_ids":["https://openalex.org/I52179390"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056585882","display_name":"Panos Patros","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Panos Patros","raw_affiliation_strings":["Raygun Performance Monitoring, Wellington, New Zealand"],"raw_orcid":"https://orcid.org/0000-0002-1366-9411","affiliations":[{"raw_affiliation_string":"Raygun Performance Monitoring, Wellington, New Zealand","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5101933782"],"corresponding_institution_ids":["https://openalex.org/I52179390"],"apc_list":{"value":3290,"currency":"USD","value_usd":3290},"apc_paid":{"value":3290,"currency":"USD","value_usd":3290},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16086219,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"34","issue":"4","first_page":"539","last_page":"571"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9901000261306763,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.8095046281814575},{"id":"https://openalex.org/keywords/supervisor","display_name":"Supervisor","score":0.7574114799499512},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6478832960128784},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4929013252258301},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4489332437515259},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4417670965194702},{"id":"https://openalex.org/keywords/android-application","display_name":"Android application","score":0.42555326223373413},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3894950747489929},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.13062283396720886}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.8095046281814575},{"id":"https://openalex.org/C2779110517","wikidata":"https://www.wikidata.org/wiki/Q1240788","display_name":"Supervisor","level":2,"score":0.7574114799499512},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6478832960128784},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4929013252258301},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4489332437515259},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4417670965194702},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.42555326223373413},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3894950747489929},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.13062283396720886},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10626-024-00406-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10626-024-00406-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10626-024-00406-1.pdf","source":{"id":"https://openalex.org/S134484881","display_name":"Discrete Event Dynamic Systems","issn_l":"0924-6703","issn":["0924-6703","1573-7594"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discrete Event Dynamic Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10626-024-00406-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10626-024-00406-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10626-024-00406-1.pdf","source":{"id":"https://openalex.org/S134484881","display_name":"Discrete Event Dynamic Systems","issn_l":"0924-6703","issn":["0924-6703","1573-7594"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discrete Event Dynamic Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311746","display_name":"University of Waikato","ror":"https://ror.org/013fsnh78"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404287441.pdf","grobid_xml":"https://content.openalex.org/works/W4404287441.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W171274305","https://openalex.org/W1561877636","https://openalex.org/W1943233084","https://openalex.org/W1997931601","https://openalex.org/W2007737936","https://openalex.org/W2016380948","https://openalex.org/W2059057465","https://openalex.org/W2060692877","https://openalex.org/W2070386561","https://openalex.org/W2098467469","https://openalex.org/W2106649514","https://openalex.org/W2163119090","https://openalex.org/W2296579688","https://openalex.org/W2343325785","https://openalex.org/W2557385690","https://openalex.org/W2577741565","https://openalex.org/W2581679042","https://openalex.org/W2589217375","https://openalex.org/W2611230134","https://openalex.org/W2619422284","https://openalex.org/W2737578512","https://openalex.org/W2738263528","https://openalex.org/W2780577826","https://openalex.org/W2783466036","https://openalex.org/W2784113120","https://openalex.org/W2787931603","https://openalex.org/W2888194137","https://openalex.org/W2903788200","https://openalex.org/W2906643866","https://openalex.org/W2910470804","https://openalex.org/W2911311548","https://openalex.org/W2932977083","https://openalex.org/W2944256336","https://openalex.org/W2963204406","https://openalex.org/W3032258369","https://openalex.org/W3115397429","https://openalex.org/W3124528005","https://openalex.org/W3163186834","https://openalex.org/W4213449907","https://openalex.org/W4224288244","https://openalex.org/W4249866328","https://openalex.org/W4250658309","https://openalex.org/W4302339081","https://openalex.org/W4320164562","https://openalex.org/W4392350538","https://openalex.org/W4399522541"],"related_works":["https://openalex.org/W1565885216","https://openalex.org/W4285815317","https://openalex.org/W327645657","https://openalex.org/W4253505977","https://openalex.org/W2011124320","https://openalex.org/W4229710179","https://openalex.org/W4327782052","https://openalex.org/W4298063370","https://openalex.org/W2965382761","https://openalex.org/W4299620683"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"paper":[2],"proposes":[3],"a":[4,68],"finite-state":[5,40,43],"machine":[6],"based":[7,13],"approach":[8],"to":[9,24,39,72,90,111],"recognise":[10],"crypto":[11],"ransomware":[12,100],"on":[14],"their":[15],"behaviour.":[16],"Malicious":[17],"and":[18,35,37,56],"benign":[19],"Android":[20],"applications":[21,78],"are":[22,32,45],"executed":[23],"capture":[25],"the":[26,53,92,95],"system":[27,71],"calls":[28],"they":[29],"generate,":[30],"which":[31,51,97],"then":[33],"filtered":[34],"tokenised":[36],"converted":[38],"machines.":[41],"The":[42,61],"machines":[44],"simplified":[46],"using":[47],"supervisor":[48],"reduction":[49],",":[50],"generalises":[52],"behavioural":[54],"patterns":[55],"produces":[57],"compact":[58],"classification":[59,62],"models.":[60],"models":[63],"can":[64,101],"be":[65,102],"implemented":[66],"in":[67],"lightweight":[69],"monitoring":[70],"detect":[73],"malicious":[74],"behaviour":[75],"of":[76,83,94,109],"running":[77],"quickly.":[79],"An":[80],"extensive":[81],"set":[82],"cross":[84],"validation":[85],"experiments":[86],"is":[87],"carried":[88],"out":[89],"demonstrate":[91],"viability":[93],"approach,":[96],"show":[98],"that":[99],"classified":[103],"accurately":[104],"with":[105],"an":[106],"F1":[107],"score":[108],"up":[110],"93.8%.":[112]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}