{"id":"https://openalex.org/W2906631928","doi":"https://doi.org/10.1109/ccst.2018.8585560","title":"Toward Developing a Systematic Approach to Generate Benchmark Android Malware Datasets and Classification","display_name":"Toward Developing a Systematic Approach to Generate Benchmark Android Malware Datasets and Classification","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2906631928","doi":"https://doi.org/10.1109/ccst.2018.8585560","mag":"2906631928"},"language":"en","primary_location":{"id":"doi:10.1109/ccst.2018.8585560","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccst.2018.8585560","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Carnahan Conference on Security Technology (ICCST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082926585","display_name":"Arash Habibi Lashkari","orcid":"https://orcid.org/0000-0002-1240-6433"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]},{"id":"https://openalex.org/I4405258595","display_name":"Canadian Institute for Cybersecurity","ror":"https://ror.org/00yhsjs55","country_code":"CA","type":"facility","lineage":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Arash Habibi Lashkari","raw_affiliation_strings":["Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada","institution_ids":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002719412","display_name":"Andi Fitriah Abdul Kadir","orcid":"https://orcid.org/0009-0007-7479-6303"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]},{"id":"https://openalex.org/I4405258595","display_name":"Canadian Institute for Cybersecurity","ror":"https://ror.org/00yhsjs55","country_code":"CA","type":"facility","lineage":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Andi Fitriah A. Kadir","raw_affiliation_strings":["Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada","institution_ids":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079087613","display_name":"Laya Taheri","orcid":null},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]},{"id":"https://openalex.org/I4405258595","display_name":"Canadian Institute for Cybersecurity","ror":"https://ror.org/00yhsjs55","country_code":"CA","type":"facility","lineage":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Laya Taheri","raw_affiliation_strings":["Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada","institution_ids":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034685391","display_name":"Ali A. Ghorbani","orcid":"https://orcid.org/0000-0001-9189-6268"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]},{"id":"https://openalex.org/I4405258595","display_name":"Canadian Institute for Cybersecurity","ror":"https://ror.org/00yhsjs55","country_code":"CA","type":"facility","lineage":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali A. Ghorbani","raw_affiliation_strings":["Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Canadian Institute for Cybersecurity (CIC), University of New Brunswick, Fredericton, NB, Canada","institution_ids":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.7773,"has_fulltext":false,"cited_by_count":347,"citation_normalized_percentile":{"value":0.99474157,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9649999737739563,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8300273418426514},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.825117826461792},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.7031447291374207},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.6972464323043823},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6499553918838501},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.636658251285553},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6076220273971558},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5423158407211304},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5149112939834595},{"id":"https://openalex.org/keywords/mobile-malware","display_name":"Mobile malware","score":0.47761744260787964},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46962761878967285},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.46009889245033264},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.45488858222961426},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.17819920182228088},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08150902390480042}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8300273418426514},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.825117826461792},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.7031447291374207},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.6972464323043823},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6499553918838501},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.636658251285553},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6076220273971558},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5423158407211304},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5149112939834595},{"id":"https://openalex.org/C2780967490","wikidata":"https://www.wikidata.org/wiki/Q1291200","display_name":"Mobile malware","level":3,"score":0.47761744260787964},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46962761878967285},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.46009889245033264},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.45488858222961426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.17819920182228088},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08150902390480042},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccst.2018.8585560","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccst.2018.8585560","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Carnahan Conference on Security Technology (ICCST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1532142362","https://openalex.org/W2035656211","https://openalex.org/W2074023167","https://openalex.org/W2122672392","https://openalex.org/W2125011234","https://openalex.org/W2133990480","https://openalex.org/W2233081671","https://openalex.org/W2275058769","https://openalex.org/W2292240422","https://openalex.org/W2313189329","https://openalex.org/W2343828539","https://openalex.org/W2401896535","https://openalex.org/W2471853823","https://openalex.org/W2538940504","https://openalex.org/W2569537748","https://openalex.org/W2591712613","https://openalex.org/W2620844046","https://openalex.org/W2752052041","https://openalex.org/W2897230315","https://openalex.org/W6712825693","https://openalex.org/W6743915909"],"related_works":["https://openalex.org/W2538622067","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W2181494682","https://openalex.org/W3200508744","https://openalex.org/W2311926078","https://openalex.org/W2717179875","https://openalex.org/W4249118297","https://openalex.org/W4312234627","https://openalex.org/W2895504842"],"abstract_inverted_index":{"Malware":[0],"detection":[1,21,33],"is":[2,63],"one":[3],"of":[4,12,60,78,94,127,131],"the":[5,10,90,105,113],"most":[6,49],"important":[7],"factors":[8],"in":[9,27],"security":[11],"smartphones.":[13],"Academic":[14],"researchers":[15],"have":[16],"extensively":[17],"studied":[18],"Android":[19,71],"malware":[20,72],"problems.":[22],"Machine":[23],"learning":[24],"methods":[25],"proposed":[26,121],"previous":[28,95],"work":[29],"typically":[30],"reported":[31],"high":[32],"performance":[34],"and":[35,41,80,92,111,129,142],"fast":[36],"prediction":[37],"times":[38],"on":[39,46],"fixed":[40],"defective":[42],"datasets.":[43,96],"Therefore,":[44],"based":[45],"these":[47],"shortcomings":[48,91],"datasets":[50,73],"are":[51],"not":[52],"suitable":[53],"for":[54,109,133],"real-world":[55],"deployment.":[56],"The":[57,120],"main":[58],"goal":[59],"this":[61],"paper":[62],"to":[64,69,103],"propose":[65],"a":[66,82],"systematic":[67],"approach":[68],"generate":[70],"using":[74],"real":[75],"smartphones":[76],"instead":[77],"emulators":[79],"develop":[81],"new":[83],"dataset,":[84],"namely":[85,136],"CI-CAndMal2017,":[86],"which":[87],"covers":[88],"all":[89],"limitations":[93],"Also,":[97],"we":[98],"offer":[99],"80":[100],"traffic":[101,118],"features":[102],"select":[104],"best":[106],"feature":[107],"sets":[108],"detecting":[110],"classifying":[112],"malicious":[114],"families":[115],"just":[116],"by":[117],"analysis.":[119],"method":[122],"showed":[123],"an":[124],"average":[125],"precision":[126],"85%":[128],"recall":[130],"88%":[132],"three":[134],"classifiers,":[135],"Random":[137],"Forest(RF),":[138],"K-Nearest":[139],"Neighbor":[140],"(KNN),":[141],"Decision":[143],"Tree":[144],"(DT).":[145]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":58},{"year":2024,"cited_by_count":67},{"year":2023,"cited_by_count":64},{"year":2022,"cited_by_count":46},{"year":2021,"cited_by_count":58},{"year":2020,"cited_by_count":26},{"year":2019,"cited_by_count":9}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}