{"id":"https://openalex.org/W4403100518","doi":"https://doi.org/10.1007/s11416-024-00536-y","title":"Experts still needed: boosting long-term android malware detection with active learning","display_name":"Experts still needed: boosting long-term android malware detection with active learning","publication_year":2024,"publication_date":"2024-10-03","ids":{"openalex":"https://openalex.org/W4403100518","doi":"https://doi.org/10.1007/s11416-024-00536-y"},"language":"en","primary_location":{"id":"doi:10.1007/s11416-024-00536-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-024-00536-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-024-00536-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11416-024-00536-y.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011582148","display_name":"Alejandro Guerra-Manzanares","orcid":"https://orcid.org/0000-0002-3655-5804"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]}],"countries":["EE"],"is_corresponding":true,"raw_author_name":"Alejandro Guerra-Manzanares","raw_affiliation_strings":["Tallinn University of Technology, Tallinn, Estonia"],"raw_orcid":"https://orcid.org/0000-0002-3655-5804","affiliations":[{"raw_affiliation_string":"Tallinn University of Technology, Tallinn, Estonia","institution_ids":["https://openalex.org/I111112146"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075157158","display_name":"Hayretdin Bah\u015fi","orcid":"https://orcid.org/0000-0001-8882-4095"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Hayretdin Bahsi","raw_affiliation_strings":["Tallinn University of Technology, Tallinn, Estonia"],"raw_orcid":"https://orcid.org/0000-0001-8882-4095","affiliations":[{"raw_affiliation_string":"Tallinn University of Technology, Tallinn, Estonia","institution_ids":["https://openalex.org/I111112146"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5011582148"],"corresponding_institution_ids":["https://openalex.org/I111112146"],"apc_list":{"value":2390,"currency":"EUR","value_usd":2990},"apc_paid":{"value":2390,"currency":"EUR","value_usd":2990},"fwci":2.2748,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.89416698,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"20","issue":"4","first_page":"901","last_page":"918"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8085818886756897},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8061768412590027},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.7650336027145386},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.7313267588615417},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.5010218620300293},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4962368607521057},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4814595580101013},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46231019496917725},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4345601797103882},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16479653120040894}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8085818886756897},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8061768412590027},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.7650336027145386},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.7313267588615417},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.5010218620300293},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4962368607521057},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4814595580101013},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46231019496917725},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4345601797103882},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16479653120040894},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s11416-024-00536-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-024-00536-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-024-00536-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s11416-024-00536-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11416-024-00536-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11416-024-00536-y.pdf","source":{"id":"https://openalex.org/S2764922190","display_name":"Journal of Computer Virology and Hacking Techniques","issn_l":"2263-8733","issn":["2263-8733"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Virology and Hacking Techniques","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4403100518.pdf"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W176891897","https://openalex.org/W1513874326","https://openalex.org/W1982039810","https://openalex.org/W2050855115","https://openalex.org/W2096623936","https://openalex.org/W2100454174","https://openalex.org/W2108740451","https://openalex.org/W2124415900","https://openalex.org/W2137061486","https://openalex.org/W2143521632","https://openalex.org/W2171671120","https://openalex.org/W2343514605","https://openalex.org/W2464629196","https://openalex.org/W2557716486","https://openalex.org/W2743565933","https://openalex.org/W2765800996","https://openalex.org/W2810921114","https://openalex.org/W2963204406","https://openalex.org/W2969244304","https://openalex.org/W2991034468","https://openalex.org/W2997511336","https://openalex.org/W3021503072","https://openalex.org/W3042565595","https://openalex.org/W3097730806","https://openalex.org/W3159243351","https://openalex.org/W3177627266","https://openalex.org/W3179008990","https://openalex.org/W3200739701","https://openalex.org/W3204639595","https://openalex.org/W3208097639","https://openalex.org/W4224288244","https://openalex.org/W4230765542","https://openalex.org/W4280560935","https://openalex.org/W4285607116","https://openalex.org/W4285678688","https://openalex.org/W4287644588","https://openalex.org/W4293181753","https://openalex.org/W4384434123","https://openalex.org/W4386470164","https://openalex.org/W4389719707"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"The":[0,127],"continuous":[1],"evolution":[2],"of":[3,68,100,144,178],"cyber":[4],"threats":[5],"imposes":[6],"a":[7,79,87,93,150,167,175],"critical":[8],"challenge":[9],"to":[10,64,96,157,182],"malware":[11,24,57,84,192],"detection":[12,16,48,58,85,123,128],"systems,":[13],"so":[14],"operational":[15],"solutions":[17,29],"in":[18,50,86,153,170,186],"real-world":[19],"settings":[20,188],"must":[21],"keep":[22],"up-to-date":[23],"knowledge":[25],"databases.":[26],"Machine":[27],"learning-based":[28,75],"are":[30,133],"not":[31],"exempt":[32],"from":[33],"this":[34],"requirement":[35],"as":[36],"handling":[37],"concept":[38,184],"drift":[39,185],"constitutes":[40],"the":[41,51,65,98,114,117,121,139,142,171],"primary":[42],"building":[43],"block":[44],"for":[45,77,82,112,190],"keeping":[46],"high":[47,66],"performance":[49,124],"long":[52],"term.":[53],"However,":[54],"maintaining":[55,78],"non-stationary":[56,80,187],"models":[59,146],"is":[60],"highly":[61],"demanding":[62],"due":[63,156],"cost":[67],"labeling.":[69],"This":[70,164],"study":[71,140],"applies":[72],"several":[73],"active":[74,179],"approaches":[76,181],"model":[81],"Android":[83],"7-year-long":[88],"time":[89],"frame":[90],"and":[91,108,130,161],"conducts":[92],"comprehensive":[94,176],"analysis":[95,177],"understand":[97],"impact":[99],"feature":[101],"space":[102],"selection,":[103],"different":[104],"data":[105],"balancing":[106],"techniques,":[107],"timestamping":[109],"methods,":[110],"utilized":[111],"locating":[113],"instances":[115],"along":[116],"historical":[118],"timeline,":[119],"on":[120],"model\u2019s":[122],"over":[125],"time.":[126],"accuracy":[129],"labeling":[131],"costs":[132],"compared":[134],"with":[135],"various":[136],"baselines.":[137],"Additionally,":[138],"investigates":[141],"resilience":[143],"such":[145],"against":[147],"noisy":[148],"labeling,":[149],"common":[151],"problem":[152],"production":[154],"environments":[155],"unintentional":[158],"expert":[159],"errors":[160],"adversarial":[162],"attacks.":[163],"research":[165],"fills":[166],"significant":[168],"gap":[169],"literature":[172],"by":[173],"conducting":[174],"learning":[180],"address":[183],"established":[189],"mobile":[191],"detection.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6}],"updated_date":"2026-05-05T08:41:31.759640","created_date":"2025-10-10T00:00:00"}