{"id":"https://openalex.org/W4409916767","doi":"https://doi.org/10.1109/access.2025.3565526","title":"LLM-MalDetect: A Large Language Model-Based Method for Android Malware Detection","display_name":"LLM-MalDetect: A Large Language Model-Based Method for Android Malware Detection","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409916767","doi":"https://doi.org/10.1109/access.2025.3565526"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3565526","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565526","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3565526","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117372600","display_name":"Ruirui Feng","orcid":"https://orcid.org/0009-0003-4472-1387"},"institutions":[{"id":"https://openalex.org/I43337087","display_name":"Hebei University","ror":"https://ror.org/01p884a79","country_code":"CN","type":"education","lineage":["https://openalex.org/I43337087"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruirui Feng","raw_affiliation_strings":["College of Mathematics and Information Science, Hebei University, Baoding, China"],"raw_orcid":"https://orcid.org/0009-0003-4472-1387","affiliations":[{"raw_affiliation_string":"College of Mathematics and Information Science, Hebei University, Baoding, China","institution_ids":["https://openalex.org/I43337087"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101693360","display_name":"Hui Chen","orcid":"https://orcid.org/0000-0002-5703-9454"},"institutions":[{"id":"https://openalex.org/I182722699","display_name":"Shenzhen Polytechnic University","ror":"https://ror.org/00d2w9g53","country_code":"CN","type":"education","lineage":["https://openalex.org/I182722699"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Chen","raw_affiliation_strings":["School of Artificial Intelligence, Shenzhen Polytechnic University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-5703-9454","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Shenzhen Polytechnic University, Shenzhen, China","institution_ids":["https://openalex.org/I182722699"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400133","display_name":"Shuo Wang","orcid":"https://orcid.org/0000-0001-8938-2364"},"institutions":[{"id":"https://openalex.org/I43337087","display_name":"Hebei University","ror":"https://ror.org/01p884a79","country_code":"CN","type":"education","lineage":["https://openalex.org/I43337087"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuo Wang","raw_affiliation_strings":["College of Mathematics and Information Science, Hebei University, Baoding, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Mathematics and Information Science, Hebei University, Baoding, China","institution_ids":["https://openalex.org/I43337087"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051778431","display_name":"Md Monjurul Karim","orcid":"https://orcid.org/0000-0003-1753-065X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210145761","display_name":"Shenzhen Institutes of Advanced Technology","ror":"https://ror.org/04gh4er46","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210145761"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Md Monjurul Karim","raw_affiliation_strings":["Shenzhen Key Laboratory for High Performance Data Mining, Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China","Shenzhen Institute of Advanced Technology, Shenzhen Key Laboratory for High Performance Data Mining, Chinese Academy of Sciences, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1753-065X","affiliations":[{"raw_affiliation_string":"Shenzhen Key Laboratory for High Performance Data Mining, Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China","institution_ids":["https://openalex.org/I4210145761","https://openalex.org/I19820366"]},{"raw_affiliation_string":"Shenzhen Institute of Advanced Technology, Shenzhen Key Laboratory for High Performance Data Mining, Chinese Academy of Sciences, Shenzhen, China","institution_ids":["https://openalex.org/I4210145761","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052377100","display_name":"Qingshan Jiang","orcid":"https://orcid.org/0000-0002-8040-0308"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210145761","display_name":"Shenzhen Institutes of Advanced Technology","ror":"https://ror.org/04gh4er46","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210145761"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingshan Jiang","raw_affiliation_strings":["Shenzhen Key Laboratory for High Performance Data Mining, Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China","Shenzhen Institute of Advanced Technology, Shenzhen Key Laboratory for High Performance Data Mining, Chinese Academy of Sciences, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8040-0308","affiliations":[{"raw_affiliation_string":"Shenzhen Key Laboratory for High Performance Data Mining, Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China","institution_ids":["https://openalex.org/I4210145761","https://openalex.org/I19820366"]},{"raw_affiliation_string":"Shenzhen Institute of Advanced Technology, Shenzhen Key Laboratory for High Performance Data Mining, Chinese Academy of Sciences, Shenzhen, China","institution_ids":["https://openalex.org/I4210145761","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":13.688,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.99146206,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"81347","last_page":"81364"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.973800003528595,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9678999781608582,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8097991943359375},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7957764863967896},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.7388831377029419},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6285735368728638},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4191477596759796},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.39608871936798096},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.341083824634552}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8097991943359375},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7957764863967896},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.7388831377029419},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6285735368728638},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4191477596759796},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39608871936798096},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.341083824634552}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3565526","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565526","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:96105b1c852a4be28ed28b0570eeb03b","is_oa":true,"landing_page_url":"https://doaj.org/article/96105b1c852a4be28ed28b0570eeb03b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 81347-81364 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3565526","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565526","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1185030771","display_name":null,"funder_award_id":"2021YFF1200100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G2080230077","display_name":null,"funder_award_id":"6023310009K","funder_id":"https://openalex.org/F4320333714","funder_display_name":"Cave Science and Technology Research Fund"},{"id":"https://openalex.org/G2092676231","display_name":null,"funder_award_id":"6023310010K","funder_id":"https://openalex.org/F4320333714","funder_display_name":"Cave Science and Technology Research Fund"},{"id":"https://openalex.org/G2092830975","display_name":null,"funder_award_id":"22567623H","funder_id":"https://openalex.org/F4320335961","funder_display_name":"National Science and Technology Planning Project"},{"id":"https://openalex.org/G4251720574","display_name":null,"funder_award_id":"F2021201055","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G5109002921","display_name":null,"funder_award_id":"6023312038K","funder_id":"https://openalex.org/F4320333714","funder_display_name":"Cave Science and Technology Research Fund"},{"id":"https://openalex.org/G8703346231","display_name":null,"funder_award_id":"2021YFF1200104","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320322163","display_name":"Natural Science Foundation of Hebei Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320333714","display_name":"Cave Science and Technology Research Fund","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335961","display_name":"National Science and Technology Planning Project","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W2010065958","https://openalex.org/W2110889728","https://openalex.org/W2122672392","https://openalex.org/W2152442131","https://openalex.org/W2294586830","https://openalex.org/W2524841068","https://openalex.org/W2768073432","https://openalex.org/W2773683702","https://openalex.org/W2775237336","https://openalex.org/W2782290149","https://openalex.org/W2792310543","https://openalex.org/W2888194137","https://openalex.org/W2896457183","https://openalex.org/W2963213304","https://openalex.org/W3042927179","https://openalex.org/W3083703328","https://openalex.org/W3102409936","https://openalex.org/W3129339021","https://openalex.org/W3167683049","https://openalex.org/W3209736367","https://openalex.org/W4200493858","https://openalex.org/W4205876068","https://openalex.org/W4226294137","https://openalex.org/W4282549944","https://openalex.org/W4306316917","https://openalex.org/W4308963910","https://openalex.org/W4318275390","https://openalex.org/W4376870884","https://openalex.org/W4383340358","https://openalex.org/W4385245566","https://openalex.org/W4385977738","https://openalex.org/W4388857307","https://openalex.org/W4389169163","https://openalex.org/W4391020127","https://openalex.org/W4391687290","https://openalex.org/W4400976341","https://openalex.org/W4402457704","https://openalex.org/W4402667093","https://openalex.org/W4402671665","https://openalex.org/W4403600666","https://openalex.org/W4403628430","https://openalex.org/W4407085153","https://openalex.org/W6679436768","https://openalex.org/W6778883912","https://openalex.org/W6796581206","https://openalex.org/W6810334672","https://openalex.org/W6858023062","https://openalex.org/W6869164663","https://openalex.org/W6873307135"],"related_works":["https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2311926078","https://openalex.org/W2895504842","https://openalex.org/W1565885216","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"Android":[0,53,67],"malware":[1,24,54],"poses":[2],"a":[3,78,105,112],"significant":[4],"cybersecurity":[5],"threat,":[6],"enabling":[7],"unauthorized":[8],"data":[9],"access,":[10],"financial":[11],"fraud,":[12],"and":[13,31,91,111,138],"device":[14],"compromise.":[15],"Although":[16],"deep":[17],"learning":[18],"methods":[19,133],"are":[20],"widely":[21],"used":[22],"for":[23,96],"detection,":[25],"they":[26],"often":[27],"struggle":[28],"with":[29,59],"stability":[30],"adaptability":[32],"in":[33,47,134],"the":[34,63],"face":[35],"of":[36,136],"evolving":[37],"threats.":[38],"While":[39],"large":[40],"language":[41],"models":[42],"(LLMs)":[43],"have":[44],"shown":[45],"promise":[46],"this":[48,73],"area,":[49],"their":[50],"application":[51,68],"to":[52,61,116,128],"detection":[55],"remains":[56],"underexplored,":[57],"particularly":[58],"regard":[60],"optimizing":[62],"semantic":[64,89],"relationships":[65],"within":[66],"packages":[69],"(APKs).":[70],"To":[71],"address":[72],"gap,":[74],"we":[75],"introduce":[76],"LLM-MalDetect,":[77],"novel":[79],"framework":[80],"that":[81,124],"improves":[82],"LLM-based":[83],"APK":[84],"analysis":[85],"by":[86],"explicitly":[87],"modeling":[88],"dependencies":[90],"leveraging":[92],"structured":[93],"prompt":[94],"engineering":[95],"optimized":[97],"detection.":[98],"Our":[99],"approach":[100],"formalizes":[101],"LLM":[102],"adaptation":[103],"through":[104],"robust":[106],"string-based":[107],"feature":[108],"extraction":[109],"method":[110],"tailored":[113],"fine-tuning":[114],"strategy":[115],"enhance":[117],"precision.":[118],"Evaluations":[119],"on":[120],"benchmark":[121],"datasets":[122],"demonstrate":[123],"LLM-MalDetect":[125],"achieves":[126],"up":[127],"98.97%":[129],"accuracy,":[130],"outperforms":[131],"existing":[132],"terms":[135],"robustness,":[137],"enables":[139],"real-time":[140],"analysis.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":9}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2025-10-10T00:00:00"}
