{"id":"https://openalex.org/W4212862390","doi":"https://doi.org/10.1109/access.2022.3151357","title":"FAM: Featuring Android Malware for Deep Learning-Based Familial Analysis","display_name":"FAM: Featuring Android Malware for Deep Learning-Based Familial Analysis","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4212862390","doi":"https://doi.org/10.1109/access.2022.3151357"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3151357","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3151357","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09713838.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09713838.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082863218","display_name":"Younghoon Ban","orcid":"https://orcid.org/0000-0002-1759-9668"},"institutions":[{"id":"https://openalex.org/I141371507","display_name":"Soongsil University","ror":"https://ror.org/017xnm587","country_code":"KR","type":"education","lineage":["https://openalex.org/I141371507"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Younghoon Ban","raw_affiliation_strings":["School of Software Convergence, Soongsil University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-1759-9668","affiliations":[{"raw_affiliation_string":"School of Software Convergence, Soongsil University, Seoul, South Korea","institution_ids":["https://openalex.org/I141371507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073290096","display_name":"Sunjun Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I141371507","display_name":"Soongsil University","ror":"https://ror.org/017xnm587","country_code":"KR","type":"education","lineage":["https://openalex.org/I141371507"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sunjun Lee","raw_affiliation_strings":["School of Software, Soongsil University, Seoul, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software, Soongsil University, Seoul, South Korea","institution_ids":["https://openalex.org/I141371507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033252202","display_name":"Dokyung Song","orcid":"https://orcid.org/0000-0002-9371-4701"},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dokyung Song","raw_affiliation_strings":["Department of Computer Science, Yonsei University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-9371-4701","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Yonsei University, Seoul, South Korea","institution_ids":["https://openalex.org/I193775966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060286024","display_name":"Haehyun Cho","orcid":"https://orcid.org/0000-0002-5344-5252"},"institutions":[{"id":"https://openalex.org/I141371507","display_name":"Soongsil University","ror":"https://ror.org/017xnm587","country_code":"KR","type":"education","lineage":["https://openalex.org/I141371507"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Haehyun Cho","raw_affiliation_strings":["School of Software, Soongsil University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-5344-5252","affiliations":[{"raw_affiliation_string":"School of Software, Soongsil University, Seoul, South Korea","institution_ids":["https://openalex.org/I141371507"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026819793","display_name":"Jeong Hyun Yi","orcid":"https://orcid.org/0000-0002-2720-0593"},"institutions":[{"id":"https://openalex.org/I141371507","display_name":"Soongsil University","ror":"https://ror.org/017xnm587","country_code":"KR","type":"education","lineage":["https://openalex.org/I141371507"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jeong Hyun Yi","raw_affiliation_strings":["School of Software, Soongsil University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-2720-0593","affiliations":[{"raw_affiliation_string":"School of Software, Soongsil University, Seoul, South Korea","institution_ids":["https://openalex.org/I141371507"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.6968,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.83301039,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"10","issue":null,"first_page":"20008","last_page":"20018"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9779000282287598,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8867137432098389},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8063130378723145},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7156049013137817},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6847321391105652},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6607720255851746},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6253371238708496},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.616116464138031},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5549484491348267},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.47847458720207214},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46561431884765625},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.41755396127700806},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.30776625871658325},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1464870572090149},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08326917886734009}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8867137432098389},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8063130378723145},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7156049013137817},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6847321391105652},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6607720255851746},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6253371238708496},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.616116464138031},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5549484491348267},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.47847458720207214},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46561431884765625},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.41755396127700806},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30776625871658325},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1464870572090149},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08326917886734009}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2022.3151357","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3151357","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09713838.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c718ef95ba9f4c54a630f5c6b8f431d2","is_oa":true,"landing_page_url":"https://doaj.org/article/c718ef95ba9f4c54a630f5c6b8f431d2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 20008-20018 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3151357","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3151357","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09713838.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.41999998688697815,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[{"id":"https://openalex.org/G2181224684","display_name":null,"funder_award_id":"NRF2020R1A2C2014336","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"},{"id":"https://openalex.org/G3316570471","display_name":null,"funder_award_id":"NRF2020R1A2C2014336","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"},{"id":"https://openalex.org/G8898060886","display_name":null,"funder_award_id":"NRF2021R1F1A1057436","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4212862390.pdf","grobid_xml":"https://content.openalex.org/works/W4212862390.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W1832693441","https://openalex.org/W1943233084","https://openalex.org/W2007857904","https://openalex.org/W2092942461","https://openalex.org/W2110889728","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2168103835","https://openalex.org/W2286924183","https://openalex.org/W2403995870","https://openalex.org/W2577741565","https://openalex.org/W2591902139","https://openalex.org/W2607500032","https://openalex.org/W2618014206","https://openalex.org/W2751702350","https://openalex.org/W2753669113","https://openalex.org/W2781198008","https://openalex.org/W2789983203","https://openalex.org/W2791541601","https://openalex.org/W2849849680","https://openalex.org/W2899326855","https://openalex.org/W2955308964","https://openalex.org/W2962744253","https://openalex.org/W2963954089","https://openalex.org/W2963989339","https://openalex.org/W2964136807","https://openalex.org/W2996686204","https://openalex.org/W3004280948","https://openalex.org/W3005273021","https://openalex.org/W3006325478","https://openalex.org/W3009677746","https://openalex.org/W3021426193","https://openalex.org/W3082603384","https://openalex.org/W3083703328","https://openalex.org/W3103798145","https://openalex.org/W3111533025","https://openalex.org/W3112452874","https://openalex.org/W3118910683","https://openalex.org/W3125596609","https://openalex.org/W3132999523","https://openalex.org/W3177025178","https://openalex.org/W6682691769","https://openalex.org/W6725276699","https://openalex.org/W6732855312","https://openalex.org/W6734189680","https://openalex.org/W6753153400","https://openalex.org/W6773728416","https://openalex.org/W6797607759"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W4285507391","https://openalex.org/W2610659201","https://openalex.org/W3107556205","https://openalex.org/W4234891089","https://openalex.org/W3200508744","https://openalex.org/W2183925834","https://openalex.org/W2067547021","https://openalex.org/W2805262980"],"abstract_inverted_index":{"To":[0],"handle":[1],"relentlessly":[2],"emerging":[3],"Android":[4,47,104,121,143],"malware,":[5,27,122,135,160],"deep":[6,19,95,166],"learning":[7],"has":[8,49,198],"been":[9,51],"widely":[10],"adopted":[11],"in":[12,33,159,179,188],"the":[13,59,81,124,162,189,216,248],"research":[14],"community.":[15],"Prior":[16],"work":[17],"proposed":[18],"learning-based":[20,96,167],"approaches":[21],"that":[22],"use":[23],"different":[24,101,149,212],"features":[25,102,119,141,213,224],"of":[26,45,61,72,103,120,129,142,164,218,235,241],"and":[28,106,177,237],"reported":[29],"a":[30,63,67,70,238,243],"high":[31],"accuracy":[32,234],"malware":[34,38,48,65,78,105,185,197],"detection,":[35],"i.e.,":[36],"classifying":[37,62],"from":[39,133,191],"benign":[40],"applications.":[41],"However,":[42],"familial":[43,97,168,219],"analysis":[44,56,79,82,98,169],"real-world":[46,184],"not":[50],"extensively":[52],"studied":[53],"yet.":[54],"Familial":[55],"refers":[57],"to":[58,193,215,229,232],"process":[60],"given":[64],"into":[66],"family":[68],"(or":[69],"set":[71],"families),":[73],"which":[74,136],"can":[75,110],"greatly":[76],"accelerate":[77],"as":[80,153],"gives":[83],"their":[84,112,206],"fine-grained":[85],"behavioral":[86],"characteristics.":[87],"In":[88],"this":[89],"work,":[90],"we":[91,226],"shed":[92],"light":[93],"on":[94,117,182,205,245],"by":[99],"studying":[100],"how":[107,148,154,211],"effectively":[108],"they":[109],"represent":[111,138],"(malicious)":[113],"behaviors.":[114,207],"We":[115,145],"focus":[116],"string":[118,140,150],"namely":[123],"Abstract":[125],"Syntax":[126],"Trees":[127],"(AST)":[128],"all":[130,139,223],"functions":[131],"extracted":[132],"each":[134,196],"faithfully":[137],"malware.":[144],"thoroughly":[146],"study":[147],"features,":[151],"such":[152],"security-sensitive":[155],"APIs":[156],"are":[157],"used":[158],"affect":[161],"performance":[163,217],"our":[165],"model.":[170],"A":[171],"convolutional":[172],"neural":[173],"network":[174],"was":[175],"trained":[176],"tested":[178],"various":[180],"configurations":[181],"28,179":[183],"dataset":[186],"appeared":[187],"wild":[190],"2018":[192],"2020,":[194],"where":[195],"one":[199],"or":[200],"more":[201],"labels":[202],"assigned":[203],"based":[204],"Our":[208],"evaluation":[209],"reveals":[210],"contribute":[214],"analysis.":[220],"Notably,":[221],"with":[222,247],"combined,":[225],"were":[227],"able":[228],"produce":[230],"up":[231],"an":[233],"98%":[236],"micro":[239],"F1-score":[240],"0.82,":[242],"result":[244],"par":[246],"state-of-the-art.":[249]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}