{"id":"https://openalex.org/W2584658892","doi":"https://doi.org/10.1109/bigdata.2016.7840712","title":"Android malware development on public malware scanning platforms: A large-scale data-driven study","display_name":"Android malware development on public malware scanning platforms: A large-scale data-driven study","publication_year":2016,"publication_date":"2016-12-01","ids":{"openalex":"https://openalex.org/W2584658892","doi":"https://doi.org/10.1109/bigdata.2016.7840712","mag":"2584658892"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2016.7840712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2016.7840712","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101650393","display_name":"Heqing Huang","orcid":"https://orcid.org/0000-0001-8113-3531"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Heqing Huang","raw_affiliation_strings":["IBM T.J. Watson Research Center","The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center","institution_ids":[]},{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086241811","display_name":"Cong Zheng","orcid":"https://orcid.org/0000-0002-0195-4880"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cong Zheng","raw_affiliation_strings":["Georgia Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069622674","display_name":"Junyuan Zeng","orcid":"https://orcid.org/0000-0002-2413-3065"},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Junyuan Zeng","raw_affiliation_strings":["The University of Texas at Dallas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at Dallas","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100606053","display_name":"Wu Zhou","orcid":"https://orcid.org/0000-0002-5917-1723"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wu Zhou","raw_affiliation_strings":["North Carolina State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101952501","display_name":"Sencun Zhu","orcid":"https://orcid.org/0000-0002-1047-7967"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sencun Zhu","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102712900","display_name":"Suresh Chari","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suresh Chari","raw_affiliation_strings":["IBM T.J. Watson Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100383731","display_name":"Ce Zhang","orcid":"https://orcid.org/0000-0002-8105-7505"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ce Zhang","raw_affiliation_strings":["ETH Zurich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1090","last_page":"1099"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9290981292724609},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8491619825363159},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.7563691735267639},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6849783062934875},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.659491240978241},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5921542048454285},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.5755887031555176},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5308327078819275},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.47654610872268677},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.46273621916770935},{"id":"https://openalex.org/keywords/suspect","display_name":"Suspect","score":0.44737493991851807},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3488459587097168},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3482954502105713},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23306119441986084},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.21457213163375854}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9290981292724609},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8491619825363159},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.7563691735267639},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6849783062934875},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.659491240978241},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5921542048454285},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.5755887031555176},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5308327078819275},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.47654610872268677},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.46273621916770935},{"id":"https://openalex.org/C2778223634","wikidata":"https://www.wikidata.org/wiki/Q224952","display_name":"Suspect","level":2,"score":0.44737493991851807},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3488459587097168},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3482954502105713},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23306119441986084},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.21457213163375854},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2016.7840712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2016.7840712","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W110636400","https://openalex.org/W1445387515","https://openalex.org/W1582716752","https://openalex.org/W1912123407","https://openalex.org/W2000159976","https://openalex.org/W2038165128","https://openalex.org/W2088983597","https://openalex.org/W2121398530","https://openalex.org/W2125011234","https://openalex.org/W2264131323","https://openalex.org/W2314180245","https://openalex.org/W2399891510","https://openalex.org/W2403995870","https://openalex.org/W2518350929","https://openalex.org/W2574928120","https://openalex.org/W6628532452","https://openalex.org/W6634943795","https://openalex.org/W6640114639","https://openalex.org/W6659964845","https://openalex.org/W6678079094","https://openalex.org/W6693048737","https://openalex.org/W6698741183","https://openalex.org/W6712192629","https://openalex.org/W6731796116"],"related_works":["https://openalex.org/W3195312353","https://openalex.org/W4383468964","https://openalex.org/W3200508744","https://openalex.org/W4200054778","https://openalex.org/W2233081671","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W2311926078","https://openalex.org/W2782775281","https://openalex.org/W4312234627"],"abstract_inverted_index":{"Android":[0,12,66,110],"malware":[1,19,43,52,67,125,138,193],"scanning":[2],"services":[3,33],"(e.g.,":[4],"VirusTotal)":[5],"are":[6,34],"websites":[7],"that":[8,105,111],"users":[9],"submit":[10],"suspicious":[11],"programs":[13],"and":[14,130,218],"get":[15],"an":[16],"array":[17],"of":[18,26,50,123,160,203,210],"detection":[20],"results.":[21],"With":[22],"the":[23,47,119,124,131,157,197,207],"growing":[24],"popularity":[25],"such":[27,78,137],"websites,":[28],"we":[29,86],"suspect":[30],"that,":[31],"these":[32],"not":[35,60],"only":[36,61],"used":[37,144],"by":[38,156],"innocent":[39],"users,":[40],"but":[41,70],"also,":[42],"writers":[44],"for":[45,74,101,109,150],"testing":[46],"evasion":[48],"capability":[49],"their":[51],"samples.":[53],"May":[54],"this":[55,84,89],"hypothesis":[56,90],"be":[57],"true,":[58],"it":[59],"provides":[62,72],"interesting":[63],"insight":[64],"on":[65,103,128,162,170,191],"development":[68,126,139,208],"(AMD),":[69],"also":[71,187],"opportunities":[73],"important":[75],"security":[76,148],"applications":[77],"as":[79],"zero-day":[80],"sample":[81],"detection.":[82],"In":[83],"work,":[85],"first":[87,120,132],"validate":[88],"with":[91,180],"massive":[92],"data;":[93],"then":[94],"design":[95],"a":[96,146],"system":[97,133,176],"AMDHunter":[98,141],"to":[99,134],"hunt":[100],"AMDs":[102,179],"VirusTotal":[104,171],"reveals":[106],"new":[107,204,215],"threats":[108],"has":[112,142],"never":[113],"been":[114,143],"revealed":[115,201],"before.":[116],"This":[117],"is":[118,154],"systematic":[121],"study":[122,153],"phenomenon":[127],"VirusTotal,":[129],"automatically":[135],"detect":[136],"cases.":[140],"in":[145],"leading":[147],"company":[149],"months.":[151],"Our":[152,175],"driven":[155],"large":[158],"amount":[159],"data":[161],"VirusTotal-":[163],"We":[164,186],"analyzed":[165],"153":[166],"million":[167],"submissions":[168],"collected":[169],"during":[172],"102":[173],"days.":[174],"identifies":[177],"1,623":[178],"13,855":[181],"samples":[182,194],"from":[183,196],"83":[184],"countries.":[185],"performed":[188],"case":[189],"studies":[190],"890":[192],"selected":[195],"identified":[198],"AMDs,":[199],"which":[200],"lots":[202],"threats,":[205],"e.g.,":[206],"cases":[209],"fake":[211],"system/banking":[212],"phishing":[213],"malware,":[214],"rooting":[216],"exploits":[217],"etc.":[219]},"counts_by_year":[{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":6}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}