{"id":"https://openalex.org/W4285240677","doi":"https://doi.org/10.1109/access.2022.3181373","title":"Deoptfuscator: Defeating Advanced Control-Flow Obfuscation Using Android Runtime (ART)","display_name":"Deoptfuscator: Defeating Advanced Control-Flow Obfuscation Using Android Runtime (ART)","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4285240677","doi":"https://doi.org/10.1109/access.2022.3181373"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3181373","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3181373","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9791217/09791370.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9791217/09791370.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075277010","display_name":"Geunha You","orcid":"https://orcid.org/0000-0001-8628-9092"},"institutions":[{"id":"https://openalex.org/I89015989","display_name":"Dankook University","ror":"https://ror.org/058pdbn81","country_code":"KR","type":"education","lineage":["https://openalex.org/I89015989"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Geunha You","raw_affiliation_strings":["Department of Computer Science and Engineering, Dankook University, Yongin, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-8628-9092","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Dankook University, Yongin, South Korea","institution_ids":["https://openalex.org/I89015989"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081575236","display_name":"Gyoosik Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I101155339","display_name":"Korea Telecom (South Korea)","ror":"https://ror.org/043n4tt17","country_code":"KR","type":"company","lineage":["https://openalex.org/I101155339"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Gyoosik Kim","raw_affiliation_strings":["Korea Telecom Infra Laboratory, Seoul, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea Telecom Infra Laboratory, Seoul, South Korea","institution_ids":["https://openalex.org/I101155339"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067982243","display_name":"Sangchul Han","orcid":"https://orcid.org/0000-0001-6100-103X"},"institutions":[{"id":"https://openalex.org/I24062138","display_name":"Konkuk University","ror":"https://ror.org/025h1m602","country_code":"KR","type":"education","lineage":["https://openalex.org/I24062138"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sangchul Han","raw_affiliation_strings":["Department of Computer Engineering, Konkuk University, Chungju, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-6100-103X","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Konkuk University, Chungju, South Korea","institution_ids":["https://openalex.org/I24062138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019467312","display_name":"Minkyu Park","orcid":"https://orcid.org/0000-0001-7392-6742"},"institutions":[{"id":"https://openalex.org/I24062138","display_name":"Konkuk University","ror":"https://ror.org/025h1m602","country_code":"KR","type":"education","lineage":["https://openalex.org/I24062138"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Minkyu Park","raw_affiliation_strings":["Department of Computer Engineering, Konkuk University, Chungju, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-7392-6742","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Konkuk University, Chungju, South Korea","institution_ids":["https://openalex.org/I24062138"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064210973","display_name":"Seong-je Cho","orcid":"https://orcid.org/0000-0001-9917-0429"},"institutions":[{"id":"https://openalex.org/I89015989","display_name":"Dankook University","ror":"https://ror.org/058pdbn81","country_code":"KR","type":"education","lineage":["https://openalex.org/I89015989"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seong-Je Cho","raw_affiliation_strings":["Department of Software Science, Dankook University, Yongin, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-9917-0429","affiliations":[{"raw_affiliation_string":"Department of Software Science, Dankook University, Yongin, South Korea","institution_ids":["https://openalex.org/I89015989"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.4865,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.81533972,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"10","issue":null,"first_page":"61426","last_page":"61440"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.9649564623832703},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8515816926956177},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8429440855979919},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.7854996919631958},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7600716352462769},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.6923340559005737},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5177044868469238},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4539168179035187},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4479833245277405},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4302841126918793},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4293859004974365},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.42938172817230225},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.37901604175567627},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21991005539894104}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.9649564623832703},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8515816926956177},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8429440855979919},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.7854996919631958},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7600716352462769},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.6923340559005737},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5177044868469238},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4539168179035187},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4479833245277405},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4302841126918793},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4293859004974365},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.42938172817230225},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.37901604175567627},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21991005539894104}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2022.3181373","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3181373","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9791217/09791370.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ecdb8171680242f0bbec39d6500958fa","is_oa":true,"landing_page_url":"https://doaj.org/article/ecdb8171680242f0bbec39d6500958fa","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 61426-61440 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3181373","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3181373","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9791217/09791370.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2704054517","display_name":null,"funder_award_id":"2021R1A2C2012574","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"},{"id":"https://openalex.org/G5596635075","display_name":null,"funder_award_id":"2021R1A2C2012574","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"},{"id":"https://openalex.org/G8852228081","display_name":null,"funder_award_id":"2018R1A2B2004830","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4285240677.pdf","grobid_xml":"https://content.openalex.org/works/W4285240677.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W1538186256","https://openalex.org/W1567046609","https://openalex.org/W2008453980","https://openalex.org/W2099800866","https://openalex.org/W2103827633","https://openalex.org/W2126851641","https://openalex.org/W2274307588","https://openalex.org/W2333278739","https://openalex.org/W2341430962","https://openalex.org/W2411277911","https://openalex.org/W2505939533","https://openalex.org/W2517358422","https://openalex.org/W2532550198","https://openalex.org/W2533311740","https://openalex.org/W2533383364","https://openalex.org/W2559116024","https://openalex.org/W2586043455","https://openalex.org/W2767061221","https://openalex.org/W2895932027","https://openalex.org/W2946880603","https://openalex.org/W2953998016","https://openalex.org/W2960665846","https://openalex.org/W2962909855","https://openalex.org/W3002912819","https://openalex.org/W3004005939","https://openalex.org/W3096074535","https://openalex.org/W3109736747","https://openalex.org/W3125601055","https://openalex.org/W3141649109","https://openalex.org/W3158666957","https://openalex.org/W3214503314","https://openalex.org/W4247464060","https://openalex.org/W6630774020","https://openalex.org/W6634033044","https://openalex.org/W6704178690","https://openalex.org/W6730604604","https://openalex.org/W6731796116","https://openalex.org/W6732734658","https://openalex.org/W6754733780","https://openalex.org/W6765682335","https://openalex.org/W6773426209","https://openalex.org/W6787146815","https://openalex.org/W6794840684"],"related_works":["https://openalex.org/W2913519194","https://openalex.org/W2007287520","https://openalex.org/W4362634109","https://openalex.org/W2055981842","https://openalex.org/W4388820743","https://openalex.org/W2793135307","https://openalex.org/W3134235726","https://openalex.org/W2906395579","https://openalex.org/W4387947354","https://openalex.org/W1551162551"],"abstract_inverted_index":{"Code":[0],"obfuscation":[1,32,57,73,133],"is":[2,135,152],"a":[3,14,91,149],"technique":[4,134],"that":[5,159,177],"makes":[6],"it":[7,128],"difficult":[8],"for":[9],"code":[10,72],"analyzers":[11],"to":[12,34,59,75,95,102,118,153,167,171],"understand":[13],"program":[15],"by":[16,63,114],"transforming":[17],"its":[18,24],"structures":[19],"or":[20],"operations":[21],"while":[22],"maintaining":[23],"original":[25,105,121,155],"functionality.":[26],"Android":[27,99],"app":[28,43,53,100,111,151,162],"developers":[29],"often":[30],"employ":[31],"techniques":[33,58],"protect":[35],"business":[36],"logic":[37],"and":[38,81,101,116,137,157],"core":[39],"algorithm":[40],"inside":[41],"their":[42],"against":[44],"reverse":[45],"engineering":[46],"attacks.":[47],"On":[48],"the":[49,71,83,104,120,140,154,160,168,172,178],"other":[50],"hand,":[51],"malicious":[52,76,84],"writers":[54],"also":[55,175],"use":[56],"avoid":[60],"being":[61],"detected":[62],"anti-malware":[64],"software.":[65],"If":[66],"malware":[67],"analysts":[68],"can":[69,79,163],"mitigate":[70],"applied":[74,136],"apps,":[77],"they":[78],"analyze":[80,146],"detect":[82,96],"apps":[85,180],"more":[86],"efficiently.":[87],"This":[88],"paper":[89],"proposes":[90],"new":[92],"tool,":[93],"<i>Deoptfuscator</i>,":[94],"obfuscated":[97,113,141,161],"an":[98,110,131],"restore":[103,119],"source":[106],"codes.":[107,142],"<i>Deoptfuscator</i>":[108,123],"detects":[109],"control-flow":[112,132],"<i>DexGuard</i>":[115],"tries":[117],"control-flows.":[122],"deobfuscates":[124,139],"in":[125],"two":[126],"steps:":[127],"determines":[129],"whether":[130],"then":[138],"Through":[143],"experiments,":[144],"we":[145],"how":[147],"similar":[148,170],"deobfuscated":[150,179],"one":[156,169],"show":[158,176],"be":[164],"effectively":[165],"restored":[166],"original.":[173],"We":[174],"run":[181],"normally.":[182]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}