{"id":"https://openalex.org/W4402475681","doi":"https://doi.org/10.1109/ccece59415.2024.10667123","title":"Revisiting Temporal Inconsistency and Feature Extraction for Android Malware Detection","display_name":"Revisiting Temporal Inconsistency and Feature Extraction for Android Malware Detection","publication_year":2024,"publication_date":"2024-08-06","ids":{"openalex":"https://openalex.org/W4402475681","doi":"https://doi.org/10.1109/ccece59415.2024.10667123"},"language":"en","primary_location":{"id":"doi:10.1109/ccece59415.2024.10667123","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccece59415.2024.10667123","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Canadian Conference on Electrical and Computer Engineering (CCECE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004206195","display_name":"Maryam Tanha","orcid":"https://orcid.org/0000-0001-7281-1943"},"institutions":[{"id":"https://openalex.org/I174167972","display_name":"British Columbia Institute of Technology","ror":"https://ror.org/01p65pg69","country_code":"CA","type":"education","lineage":["https://openalex.org/I174167972"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Maryam Tanha","raw_affiliation_strings":["British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada"],"affiliations":[{"raw_affiliation_string":"British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada","institution_ids":["https://openalex.org/I174167972"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103730815","display_name":"Arunab Singh","orcid":null},"institutions":[{"id":"https://openalex.org/I174167972","display_name":"British Columbia Institute of Technology","ror":"https://ror.org/01p65pg69","country_code":"CA","type":"education","lineage":["https://openalex.org/I174167972"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Arunab Singh","raw_affiliation_strings":["British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada"],"affiliations":[{"raw_affiliation_string":"British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada","institution_ids":["https://openalex.org/I174167972"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107157619","display_name":"Gavin Knoke","orcid":null},"institutions":[{"id":"https://openalex.org/I174167972","display_name":"British Columbia Institute of Technology","ror":"https://ror.org/01p65pg69","country_code":"CA","type":"education","lineage":["https://openalex.org/I174167972"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Gavin Knoke","raw_affiliation_strings":["British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada"],"affiliations":[{"raw_affiliation_string":"British Columbia Institute of Technology,School of Computing and Academic Studies,Burnaby,Canada","institution_ids":["https://openalex.org/I174167972"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5004206195"],"corresponding_institution_ids":["https://openalex.org/I174167972"],"apc_list":null,"apc_paid":null,"fwci":0.7471,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.69909514,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"301","last_page":"306"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.8463765382766724},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7887247800827026},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7730073928833008},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.6703935861587524},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.600952684879303},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43878403306007385},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20196425914764404},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13085943460464478}],"concepts":[{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.8463765382766724},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7887247800827026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7730073928833008},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.6703935861587524},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.600952684879303},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43878403306007385},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20196425914764404},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13085943460464478}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccece59415.2024.10667123","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccece59415.2024.10667123","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Canadian Conference on Electrical and Computer Engineering (CCECE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2122672392","https://openalex.org/W2538057479","https://openalex.org/W2792310543","https://openalex.org/W2900890308","https://openalex.org/W2903084872","https://openalex.org/W2982299304","https://openalex.org/W2997690675","https://openalex.org/W3023529621","https://openalex.org/W3083155189","https://openalex.org/W3089189066","https://openalex.org/W3133963303","https://openalex.org/W3165327389","https://openalex.org/W3177627266","https://openalex.org/W4226353124","https://openalex.org/W4244726870","https://openalex.org/W4283214976","https://openalex.org/W4285678688","https://openalex.org/W4312290548","https://openalex.org/W4388856981","https://openalex.org/W6753153400"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2591124010","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2895504842","https://openalex.org/W4281384336","https://openalex.org/W2717179875","https://openalex.org/W4249118297"],"abstract_inverted_index":{"The":[0],"growing":[1],"popularity":[2],"and":[3,34,73,150,172,183,190],"ease":[4],"of":[5,43,53,71,83,90,96,103,138,147],"access":[6],"have":[7,168],"turned":[8],"Android":[9,31,114,177],"applications":[10],"into":[11],"prime":[12],"targets":[13],"for":[14,29,80,156,176],"malicious":[15],"attackers.":[16],"Within":[17],"the":[18,54,88,136,139,144],"security":[19],"research":[20,188],"community,":[21],"machine":[22,112],"learning":[23],"has":[24],"become":[25],"an":[26,97,148,162],"essential":[27],"instrument":[28],"conducting":[30],"malware":[32,115,178],"detection":[33],"analysis.":[35],"However,":[36],"there":[37],"are":[38],"potential":[39],"threats":[40],"to":[41,107,186],"validity":[42],"existing":[44],"studies,":[45],"mainly":[46],"resulting":[47],"from":[48],"their":[49],"used":[50,141],"datasets.":[51],"One":[52],"primary":[55],"issues":[56],"is":[57,65,120],"temporal":[58,62,109],"inconsistency":[59],"(also":[60],"called":[61],"bias)":[63],"that":[64],"caused":[66],"by":[67,123],"incorrect":[68],"time":[69,82,106,146],"splits":[70],"training":[72],"testing":[74],"sets":[75],"or":[76],"using":[77],"imprecise":[78],"indicators":[79],"release":[81,105,145],"apps.":[84],"This":[85],"paper":[86],"investigates":[87],"use":[89],"Google":[91],"Play":[92],"Store":[93],"upload":[94,164],"year":[95],"app":[98,149],"as":[99,143],"a":[100,130,152],"precise":[101],"indicator":[102],"its":[104],"address":[108],"bias":[110],"in":[111],"learning-based":[113],"detection.":[116],"Using":[117],"this":[118],"approach":[119,155],"made":[121],"possible":[122],"AndroZoo\u2019s":[124],"December":[125],"2023":[126],"data":[127,171],"release.":[128],"Through":[129],"three-layer":[131],"filtering":[132],"process,":[133],"we":[134,167],"demonstrate":[135],"unreliability":[137],"commonly":[140],"dex_date":[142],"propose":[151],"more":[153],"accurate":[154],"creating":[157],"temporally-consistent":[158],"datasets":[159],"based":[160],"on":[161],"app\u2019s":[163],"year.":[165],"Additionally,":[166],"open-sourced":[169],"our":[170],"feature":[173],"extraction":[174],"process":[175],"analysis,":[179],"supporting":[180],"both":[181],"server-side":[182],"on-device":[184],"extraction,":[185],"enhance":[187],"reproducibility":[189],"facilitate":[191],"community":[192],"access.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}
